CVE-2008-3724

This CVE affects Papoo’s web application prior to version 3.7.2, where an SQL injection flaw exists in index.php exploitable via the suchanzahl parameter. The root cause is a vulnerable handling of input in index.php allowing remote arbitrary SQL execution. The vulnerability is documented in sour...