2 matches found
CVE-2008-6425
CVE-2008-6425 concerns ComicShout 2.8, where the News.php news_id parameter is vulnerable to SQL injection. OpenVAS notes the issue arises because user data is not sufficiently sanitized before being used in SQL queries, enabling a remote attacker to manipulate or view data. Connected sources als...