CVE-2008-2556

The CVE-2008-2556 entry documents a SQL injection vulnerability in read.php of PHP Visit Counter 0.4 and earlier, exploitable via the datespan parameter in a read action. The vulnerability originates from unsafely incorporating the datespan input into SQL queries, enabling remote attackers to exe...