CVE-2008-2529

CVE-2008-2529 concerns SQL injection in Advanced Links Management (ALM) 1.5.2, exploitable through the read.php endpoint’s catId parameter. The underlying flaw allows remote attackers to inject arbitrary SQL commands via catId, potentially compromising data integrity and confidentiality. The NVD ...