CVE-2008-6285

CVE-2008-6285 describes a SQL injection in index.php of PHP TV Portal 2.0 and earlier, exploitable via the mid parameter, allowing remote attackers to execute arbitrary SQL commands. Affected software is the PHP TV Portal (versions up to 2.0 and earlier). The root cause is improper handling of us...