CVE-2008-3954

CVE-2008-3954 describes a SQL injection in the AlstraSoft Forum Pay Per Post Exchange, exploitable via the cat parameter in the showcat action of index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, as stated in the NVD entry. Affected software is the AlstraSoft...

CVE-2008-3954

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat action...