CVE-2008-5270

The CVE-2008-5270 entry concerns SQL injection in view.topics.php of Yuhhu Superstar 2008, exploitable via the board parameter. The underlying issue is an unsafely constructed SQL query in that PHP script, enabling remote attackers to manipulate the database (arbitrary SQL commands) and potential...