CVE-2008-2132

CVE-2008-2132 describes an SQL injection in Systementor PostcardMentor’s step1.asp via the cat_fldAuto parameter, allowing remote arbitrary SQL execution. Affected software is Systementor PostcardMentor; no versions or deeper root-cause details are provided in the documents. Remediation/patch inf...