CVE-2008-1957

CVE-2008-1957 describes an SQL injection vulnerability in Tr Script News 2.1, specifically in news.php where the nb parameter in voir mode can be manipulated to execute arbitrary SQL commands. The affected component is the news.php handler of Tr Script News 2.1. The current documents indicate rem...