CVE-2008-1039

The vulnerability is a SQL injection in PORAR WEBBOARD’s web interface. Specifically, a weakness in the file/endpoint associated with question.asp allows remote attackers to inject arbitrary SQL through the QID parameter, enabling potentially unauthorized database access or manipulation as descri...