Sql injection

SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via the suchanzahl parameter...

CVE-2008-3724

This CVE affects Papoo’s web application prior to version 3.7.2, where an SQL injection flaw exists in index.php exploitable via the suchanzahl parameter. The root cause is a vulnerable handling of input in index.php allowing remote arbitrary SQL execution. The vulnerability is documented in sour...