CVE-2008-3490

CVE-2008-3490: SQL injection in E-topbiz Online Dating 3 (v1.0) in members/mail.php, via the mail_id parameter in a veiw action. All evidence indicates remote authenticated users can cause arbitrary SQL execution due to improper input handling. Public exploit references exist (e.g., Exploit DB), ...