CVE-2008-6078

CVE-2008-6078 : In Limbo CMS, the Private Messaging (com_privmsg) component’s open.php is vulnerable to SQL injection via the id parameter in a pms action to index.php. The NVD entry cites a base CVSSv2 score of 7.5 (HIGH) with network access, low attack complexity, and no authentication required...

CVE-2008-6078: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in open.php in the Private Messaging comprivmsg component for Limbo CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a pms action to index.php...

Limbo CMS (Private Messaging Component) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Limbo CMS Private Messaging Component SQL Injection Vulnerability =================================================================== / Limbo CMS Private Messaging Compone...

limbocms-sql.txt

/ Limbo CMS Private Messaging Component Remote SQL Injection Vulnerability -------------------------------------------------------------------------- StAkeRathotmaildotit http://www.limboportal.com/index.php/option/downloads/task/download/id/108...