Description
A remote SQL injection vulnerability exists in Softbiz Link Directory Script. Input parameters are not properly sanitized before being used in database queries.
Impact
Attackers can inject arbitrary SQL commands to extract all data from the database, including link submissions, user accounts, and administrative credentials.
Solution
Apply parameterized queries. Contact Softbiz for a security patch.