CVE-2008-4772

CVE-2008-4772 describes an SQL injection vulnerability in QuestCMS, specifically in the file main/main.php where the parameter obj can be manipulated to execute arbitrary SQL commands by remote attackers. The NVD entry assigns a Base Score of 7.5 (High) with network access and no authentication r...