CVE-2008-6427

The CVE-2008-6427 entry documents a SQL injection vulnerability in Hivemaker Professional before or at version 1.0.2, exploitable through index.php when magic_quotes_gpc is disabled. The flaw allows remote attackers to manipulate the database via the cid parameter, potentially enabling arbitrary ...