CVE-2013-3638

CVE-2013-3638 describes a SQL injection in BoonEx Dolphin prior to 7.1.3. The flaw arises from insufficient validation of the pathes[] HTTP POST parameter passed to /administration/categories.php, allowing a remote authenticated user to execute arbitrary SQL commands in the database (with CSRF ri...