CVE-2008-4525

CVE-2008-4525 describes an SQL injection in AmpJuke 0.7.5, exploitable via a special parameter in a performerid action in index.php. The root cause is improper handling of user-supplied input, allowing arbitrary SQL execution by remote attackers (impact on confidentiality, integrity, and availabi...