CVE-2008-4887

The CVE-2008-4887 entry describes a SQL injection vulnerability in NetRisk 2.0 and earlier. Affected component is index.php handling requests where the id parameter (in profile.php or game.php) enables an attacker to manipulate SQL queries, potentially allowing remote execution of arbitrary SQL c...