CVE-2008-3497

MyPHP CMS 0.3.1 is affected by an SQL injection in pages.php via the pid parameter, enabling remote SQL execution. Root cause is unsafely constructed SQL in that parameter; impact includes partial confidentiality, integrity, and availability. No remediation details are provided in the supplied do...