4 matches found
CVE-2008-0921
SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-0921
SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-0921
The CVE-2008-0921 entry concerns a SQL injection in the news.php script of beContent 0.3.1, exploitable via the id parameter. Affected software/hardware is beContent (version 0.3.1). The underlying issue is improper handling of user-supplied input in the SQL query, enabling remote execution of ar...