CVE-2008-5168

The CVE-2008-5168 entry describes a SQL injection vulnerability in tip.php of Tips Complete Website 1.2.0, exploitable via the tipid parameter. The underlying issue is an improper input handling in the affected code path, allowing remote attackers to execute arbitrary SQL commands. Reports across...

CVE-2008-5168: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tip.php in Tips Complete Website 1.2.0 allows remote attackers to execute arbitrary SQL commands via the tipid parameter...