CVE-2008-5766

CVE-2008-5766 describes an SQL injection vulnerability in the download.php endpoint of the Farsi Script Faupload application, exploitable via the troubled id parameter to run arbitrary SQL commands. Root cause: unsafely constructed SQL queries that incorporate user input without adequate sanitiza...