CVE-2008-0224

SQL injection vulnerability in index.php in the Newbbplus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip parameter...

CVE-2008-0224

The CVE-2008-0224 issue affects RunCMS’s Newbb_plus module (versions 0.92 and earlier, running on RunCMS 1.6.1). The root cause is an SQL injection vulnerability in index.php where unsanitized input from the Client-Ip header is used in a database query by the newbb_plus module. Exploitation could...