CVE-2008-2556

SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action...

CVE-2008-2556

The CVE-2008-2556 entry documents a SQL injection vulnerability in read.php of PHP Visit Counter 0.4 and earlier, exploitable via the datespan parameter in a read action. The vulnerability originates from unsafely incorporating the datespan input into SQL queries, enabling remote attackers to exe...