CVE-2008-2532

The vulnerability CVE-2008-2532 affects the AJ Square AJ-HYIP (aka AJ HYIP Acme) forum component, specifically forum/topic_detail.php. The issue is a SQL injection in the id parameter that allows remote attackers to execute arbitrary SQL commands. This is caused by improper validation of the id i...

CVE-2008-4044

CVE-2008-4044 is an SQL injection vulnerability in AJ Square aj-hyip, specifically in article/readarticle.php, exploitable via the artid parameter to execute arbitrary SQL. The vulnerability is documented across multiple sources (NVD entry notes a remote, unauthenticated attack with high impact; ...

CVE-2008-4043

CVE-2008-4043 covers multiple SQL injection vulnerabilities in the AJ Square AJ HYIP Acme product, allowing remote attackers to modify or retrieve data via the artid parameter in two PHP endpoints: acme/article/comment.php and prime/article/comment.php. The bug is triggered through unsafely const...