CVE-2008-0878

CVE-2008-0878 describes an SQL injection in the MyAnnonces 1.7 and earlier module for RunCMS. The vulnerability is triggered via the cid parameter in a view action, allowing remote attackers to execute arbitrary SQL commands. CVSSv2 base score is 7.5 (HIGH) with network attack, low complexity, no...