CVE-2008-5851

SQL injection vulnerability in index.php in My PHP Baseball Stats MyPBS allows remote attackers to execute arbitrary SQL commands via the seasonID parameter...

CVE-2008-5851

SQL injection vulnerability in index.php in My PHP Baseball Stats MyPBS allows remote attackers to execute arbitrary SQL commands via the seasonID parameter...

CVE-2008-5851

CVE-2008-5851 describes an SQL injection in the MyPHP Baseball Stats (MyPBS) application. The vulnerability is in index.php via the seasonID parameter, allowing remote attackers to alter the backend database by issuing arbitrary SQL. The NVD data lists a base score of 7.5 (HIGH) with NETWORK atta...

CVE-2008-5851: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in My PHP Baseball Stats MyPBS allows remote attackers to execute arbitrary SQL commands via the seasonID parameter...

Unfixed XSS vulnerability at www.baseballprospectus.com

Security researcher C1c4Tr1Z, has submitted on 15/05/2008 a cross-site-scripting XSS vulnerability affecting www.baseballprospectus.com, which at the time of submission ranked 40624 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/05/2008. It...