SQL injection vulnerability in profil.php in phpMDJ 1.0.3 allows remote malicious users to execute arbitrary SQL commands via the id parameter.
phpmdj phpmdj 1.0.3