CVE-2008-4375

CVE-2008-4375 describes an SQL injection in the Aula Availscript Classmate Script’s vulnerable file viewprofile.php , exploitable via the p parameter . The root cause is that user-supplied input reaches an SQL query without proper sanitization, enabling remote attackers to execute arbitrary SQL c...