CVE-2008-7120

CVE-2008-7120 : SQL injection in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL via the news.php parameter. The vulnerability is described as V2 CVSS base score 7.5 (HIGH) with network attack vector, low complexity, no authentication needed, and parti...