CVE-2008-3378

CVE-2008-3378 describes an SQL injection in the PHP file comment.php of Fizzmedia 1.51.2 , exploitable by remote attackers via the mid parameter to execute arbitrary SQL commands. The connected documents confirm the vulnerable component and the injection vector but do not provide details on explo...