CVE-2008-6618

Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via the teacherid parameter in 1 class/HomepageMain.php and 2 class/HomepageTop.php, and 3 the messageid parameter in class/MessageReply.php...