CVE-2008-2492

CVE-2008-2492 describes multiple SQL injection flaws in Campus Bulletin Board 3.4 that allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to post3/view.asp and (2) review parameter to post3/book.asp. The connected documents confirm the vulnerable components and impa...

CVE-2008-2492

creationtimestamp| type| source ---|---|--- 2008-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31852 2008-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31851...