CVE-2008-4350

The CVE-2008-4350 entry concerns vbLOGIX Tutorial Script 1.0 (and earlier) with a SQL injection in main.php. The vulnerable component is the list action that uses the cat_id parameter, enabling remote attackers to execute arbitrary SQL commands. This is caused by unsanitized input in the paramete...