Sql injection

SQL injection vulnerability in viewcresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coderid parameter...

CVE-2008-4469: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewcresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coderid parameter...

CVE-2008-4469

CVE-2008-4469 describes an SQL injection in the view_cresume.php endpoint of the Vastal I-Tech Freelance Zone, exploitable via the coder_id parameter. The underlying issue is unsafely constructed SQL queries that allow remote attackers to alter or retrieve data. Affected product details are not e...