CVE-2008-6026

SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6026

Summary: CVE-2008-6026 affects BlueCUBE CMS with a SQL injection in tienda.php via the id parameter, enabling remote SQL command execution. Root cause: improper handling of the id input allows injection. Impact described in sources as partial confidentiality, integrity, and availability effects w...

CVE-2008-6026

SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

BlueCUBE CMS - 'tienda.php' SQL Injection

source: https://www.securityfocus.com/bid/31323/info BlueCUBE CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...