2 matches found
CVE-2008-4145: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in userreadlinks.php in Addalink 1.0 beta 4 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...
6.8CVSS6.4AI score0.00939EPSS
SaveExploits1References2
addalink <= 4 (category_id) Remote SQL Injection Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Add a link = 4 - beta || Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / Script: Add a link / Version: = 4 - beta / File affected: userreadlinks.php ...
7.1AI score
SaveExploits0
20