CVE-2008-1509

CVE-2008-1509 describes an SQL injection in XLPortal ≤ 2.2.4, triggered by the query parameter in index.php. The underlying flaw allows remote attackers to execute arbitrary SQL commands. Reported impact aligns with a high base severity (CVSS v2: 7.5, Network attack vector, no authentication, par...