CVE-2008-6037

CVE-2008-6037 describes an SQL injection in the AvailScript Article Script, specifically in the file/view component view.php, exploitable via the vulnerable parameter v. The root cause is insufficient input validation/sanitization allowing an attacker to inject SQL commands, enabling an attacker ...

CVE-2008-4371

CVE-2008-4371 describes a SQL injection in AvailScript Article Script : the vulnerability resides in articles.php and is exploitable via the aIDS parameter to execute arbitrary SQL commands remotely. The CVSS v2 base score is 7.5 (HIGH), with network access, low attack complexity, and no authenti...