Sql injection

SQL injection vulnerability in todos.php in C. Desseno YouTube Blog ytb 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3306...

CVE-2008-3307

SQL injection vulnerability in todos.php in C. Desseno YouTube Blog ytb 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3306...

CVE-2008-3307

CVE-2008-3307 is a SQL injection vulnerability affecting the C. Desseno YouTube Blog (ytb) 0.1 in the todos.php module. The vulnerability is triggered via the id parameter, allowing remote attackers to execute arbitrary SQL commands. This is a distinct vector from CVE-2008-3306. Connected sources...