Sql injection

SQL injection vulnerability in browseproject.php in Freelance Auction Script 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a pdetails action...

CVE-2008-2278

The CVE-2008-2278 entry concerns an SQL injection in Freelance Auction Script 1.0, exploitable via the pid parameter in a pdetails action of browseproject.php. The vulnerability enables remote attackers to execute arbitrary SQL commands and has a base CVSS v2 score of 7.5 (HIGH). Affected softwar...