CVE-2008-4185

CVE-2008-4185 and related entry describe an SQL injection in WebCMS Portal Edition. The flaw affects the application’s handling of the id parameter in documents actions, enabling remote attackers to execute arbitrary SQL commands. The cited paths vary by entry (index.php in the WebCMS Portal Edit...