CVE-2008-2893

CVE-2008-2893 and CVE-2008-2532 describe SQL injection flaws in AJ Square AJ HYIP (aj-hyip). Affected software: AJ HYIP/AJ Square scripts (components cited include news.php and forum/topic_detail.php). Vulnerability: unsafely constructed SQL queries via the id parameter, enabling remote attackers...