CVE-2008-1121

CVE-2008-1121 affects eazyPortal (version 1.0 and earlier). The issue is a SQL injection in index.php exploitable via the session_vars cookie, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is scored CVSS v2 base 7.5 (High) with network attack vector and no authent...