CVE-2008-5292

CVE-2008-5292 describes an SQL injection in view_snaps.php of VideoGirls BiZ, exploitable via the type parameter to allow remote attackers to execute arbitrary SQL commands. This is a server-side input-validation failure that can lead to data exposure or modification, depending on the underlying ...