CVE-2008-4352

CVE-2008-4352 describes an SQL injection in phpSmartCom 0.2, exploitable via the uid parameter in the viewprofile action of inc/pages/viewprofile.php. The underlying issue is unsafely constructed SQL queries, allowing remote attackers to execute arbitrary SQL. Affected component: phpSmartCom 0.2,...