CVE-2008-4458

The CVE-2008-4458 entry describes a SQL injection in the E-Php B2B Trading Marketplace Script, exploitable via the cid parameter in a product action. Affected component: listings.php. Root cause: unsanitized user input enabling arbitrary SQL execution. Impact: remote attackers could modify or rea...