This host is running PHP and is prone to SQL injection vulnerability.

Successful exploitation could allow local attackers to conduct SQL injection attacks via crafted input that had been properly handled in earlier versions. Impact Level: Application/Network

upgrade to PHP 5.3.5 or later For updates refer to http://www.php.net/downloads.php

The flaw is due to an error in 'set_magic_quotes_runtime()' when the MySQLi extension is used, which fails to properly interact with use of the 'mysqli_fetch_assoc()' function.

PHP version 5.3.2 to 5.3.3

• http://bugs.php.net/52221
• http://www.php.net/ChangeLog-5.php

---

Updated on 2015-03-25