CVE-2008-2562

PowerPhlogger 2.2.5 and earlier is affected by an SQL injection in edCss.php, exploitable via the css_str parameter in an edit action. The flaw allows remote authenticated users to execute arbitrary SQL commands. Affected component: edCss.php (PowerPhlogger). Root cause: improper handling of inpu...

CVE-2008-2562

creationtimestamp| type| source ---|---|--- 2008-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5744...