CVE-2008-3649

CVE-2008-3649 is a SQL injection in Article Friendly Standard’s categorydetail.php, exploited via the Cat parameter to allow remote execution of arbitrary SQL. Documents across NVD, CVE List, PRION, and CVELIST confirm the vulnerable component and parameter; the reported impact is arbitrary SQL e...

CVE-2008-3670

CVE-2008-3670 describes a SQL injection in the PHP file authordetail.php of Article Friendly Pro, allowing remote attackers to execute arbitrary SQL commands via the autid parameter. The vulnerability arises from unsafely handling user input in a database query, with impact described as the abili...