CVE-2008-0430

CVE-2008-0430 describes an SQL injection vulnerability in the form.php component of 360 Web Manager 3.0, where an attacker can craft requests to the IDFM parameter to execute arbitrary SQL commands. The issue is exploitable remotely and can impact data confidentiality, integrity, and availability...