CVE-2008-0921

The CVE-2008-0921 entry concerns a SQL injection in the news.php script of beContent 0.3.1, exploitable via the id parameter. Affected software/hardware is beContent (version 0.3.1). The underlying issue is improper handling of user-supplied input in the SQL query, enabling remote execution of ar...