CVE-2008-5269

SQL injection vulnerability in index.php in pSys 0.7.0 alpha allows remote attackers to execute arbitrary SQL commands via the shownews parameter...

CVE-2008-5269

The connected records confirm a concrete vulnerability: in pSys 0.7.0 alpha, SQL injection permits remote attackers to execute arbitrary SQL via the shownews parameter in index.php. The root cause is unsanitized input leading to database command execution. Impact is partial confidentiality/integr...