CVE-2008-3603

CVE-2008-3603 describes a SQL injection in Vacation Rental Script 3.0 (index.php) where the id parameter in a sections action enables remote attackers to execute arbitrary SQL commands. Root cause: unsafely concatenated user input in the query. Impact per the CVSS: partial confidentiality, integr...