CVE-2008-2572

CVE-2008-2572 describes a SQL injection in FlashBlog’s php/leer_comentarios.php, exploitable via the articulo_id parameter. The issue is a web-remote injection in a PHP script, leading to arbitrary SQL execution. The vulnerability is documented with a CVSS v2 base score of 7.5 (HIGH), indicating ...