CVE-2008-4353

CVE-2008-4353 describes an SQL injection vulnerability in the Linkarity product, specifically in the link.php script where the cat_id parameter is unsafely used in SQL queries. The issue allows remote attackers to execute arbitrary SQL commands against the vulnerable system. The description notes...

CVE-2008-4353

SQL injection vulnerability in link.php in Linkarity allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: although one component of Linkarity is distributable PHP code, this issue might be site-specific. If so, it should not be included in CVE...