CVE-2008-2843

CVE-2008-2843 affects doITLive CMS 2.50 and earlier, with multiple SQL injection paths allowing remote attackers to execute arbitrary SQL via (1) the ID parameter in an USUB action to default.asp and (2) the Licence[SpecialLicenseNumber] cookie (LicenceId) to edit/default.asp. The available docum...