CVE-2008-6641: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Shader TV Beta allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to 1 kanal.asp, 2 google.asp, and 3 hakk.asp in yonet/; and allow remote attackers to execute arbitrary SQL commands via the 4 username or 5...

Shader TV (Beta) Multiple Remote SQL Injection Vulnerabilities

No description provided by source. 1...