2 matches found
CVE-2008-4469
CVE-2008-4469 describes an SQL injection in the view_cresume.php endpoint of the Vastal I-Tech Freelance Zone, exploitable via the coder_id parameter. The underlying issue is unsafely constructed SQL queries that allow remote attackers to alter or retrieve data. Affected product details are not e...