CVE-2008-3506

The CVE-2008-3506 entry concerns a SQL injection in PolyPager 1.0 rc2 and earlier, exploitable via the nr parameter of the default URI. The underlying issue is that user-controlled input may be unsafely integrated into SQL commands, allowing remote attackers to execute arbitrary SQL. Affected pro...