CVE-2008-5888

CVE-2008-5888 describes multiple SQL injection vulns in Click&Rank. The vulnerabilities allow remote attackers to execute arbitrary SQL via the id parameter to hitcounter.asp, user_delete.asp, and user_update.asp, and via the userid and PassWord parameters to admin_login.asp (USERNAME and PASSWOR...