CVE-2008-6133

CVE-2008-6133 and CVE-2008-3942 describe SQL injection flaws in Full PHP Emlak Script. CVE-2008-6133 targets arsaprint.php via the id parameter (a different vector than CVE-2008-3942); CVE-2008-3942 targets landsee.php via the id parameter. Both allow remote attackers to execute arbitrary SQL com...