CWE Code: 16
Vulnerability Type: sql_injection
CVSS Score: 7.5
CWE Name:  Configuration
Summary: php 5.2.7 contains an incorrect change to the filter_unsafe_raw functionality, and unintentionally disables magic_quotes_gpc regardless of the actual magic_quotes_gpc setting, which might make it easier for context-dependent attackers to conduct sql injection attacks and unspecified other attacks.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2009-01-05
Last Modified Date: 2009-05-14