CVE-2008-4157

2008-09-22T14:34:15
ID CVE-2008-4157
Type cve
Reporter NVD
Modified 2017-09-28T21:32:01

Description

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected.