CVE-2008-2479

CVE-2008-2479 describes multiple SQL injection vulnerabilities in phpFix 2.0. The flaws allow remote attackers to execute arbitrary SQL commands via the (1) kind parameter to fix/browse.php and (2) account parameter to auth/00_pass.php. The affected software is phpFix 2.0; the underlying cause is...