2 matches found
CVE-2008-5267
An SQL injection vulnerability in Experts 1.0.0 (component: answer.php) allows remote attackers to execute arbitrary SQL via the question_id parameter when magic_quotes_gpc is disabled. Root cause: input not properly sanitized. Impact: partial confidentiality, integrity, and availability per CVSS...
6.8CVSS8.4AI score0.00909EPSS
SaveExploits2References4Affected Software1
20