CVE-2008-3212

The CVE-2008-3212 entry concerns the Scripteen Free Image Hosting Script 1.2.1. It describes multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via the following parameters: (1) username or (2) password to admin/login.php, and (3) uname or (4) pass ...