SQL injection vulnerability in detail.php in Astanda Directory Project (ADP) 1.2 and 1.3 allows remote attackers to execute arbitrary SQL commands via the link_id parameter.Referenceshttps://www.exploit-db.com/exploits/5071http://www.securityfocus.com/bid/27646