phpMDJ 1.0.3 and earlier versions
Inject malicious SQL code through the 'id' parameter in profil.php URL (e.g., profil.php?id=1' OR '1'='1)
Upgrade to a patched phpMDJ version or implement parameterized queries and input validation on the id parameter
If output shows profil.php paths, phpMDJ may be installed; check the version in the configuration or main file to confirm if it's vulnerable
find /var/www -type f -name 'profil.php' 2>/dev/null | head -10
AV:N/AC:L/Au:N/C:P/I:P/A:P