Sql injection

SQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to execute arbitrary SQL commands via the board parameter...

CVE-2008-5270

The CVE-2008-5270 entry concerns SQL injection in view.topics.php of Yuhhu Superstar 2008, exploitable via the board parameter. The underlying issue is an unsafely constructed SQL query in that PHP script, enabling remote attackers to manipulate the database (arbitrary SQL commands) and potential...