CVE-2008-5895

CVE-2008-5895 describes an SQL injection vulnerability in Mediatheka 4.2 and earlier, occurring in the connection.php file via the user parameter. The flaw allows remote attackers to execute arbitrary SQL commands, with impact including partial confidentiality/integrity/availability as per the CV...