CVE-2008-5267

SQL injection vulnerability in answer.php in Experts 1.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the questionid parameter...

Sql injection

SQL injection vulnerability in answer.php in Experts 1.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the questionid parameter...

CVE-2008-5267

SQL injection vulnerability in answer.php in Experts 1.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the questionid parameter...

CVE-2008-5267

An SQL injection vulnerability in Experts 1.0.0 (component: answer.php) allows remote attackers to execute arbitrary SQL via the question_id parameter when magic_quotes_gpc is disabled. Root cause: input not properly sanitized. Impact: partial confidentiality, integrity, and availability per CVSS...