CVE-2007-2247

SQL injection vulnerability in modules/news/article.php in phpMySpace Gold 8.10 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2007-2247

The CVE-2007-2247 entry describes a SQL injection in phpMySpace Gold 8.10, exploitable via the item_id parameter in modules/news/article.php. The root cause is unsanitized input passed into an SQL query, enabling remote execution of arbitrary SQL. No exploitation details or fixes are provided in ...