CVE-2008-2487

CVE-2008-2487 is an SQL injection vulnerability in MAXSITE 1.10 and earlier, exploitable via the category parameter in a webboard action on index.php. The issue allows remote attackers to execute arbitrary SQL commands. Affected product/version: MAXSITE 1.10 and earlier. Impact and risk: CVSS 2.0...