CVE-2008-2847

The CVE-2008-2847 entry concerns a SQL injection in the Trade module of Maxtrade AIO 1.3.23. The vulnerability is triggered via the categori parameter in the pocategorisell action to modules.php, enabling remote attackers to arbitrarily query the database. The NVD lists a CVSSv2 base score of 7.5...