CVE-2008-1870

CVE-2008-1870 describes a SQL injection in the legacy web interface for PIGMy-SQL (≤ 1.4.1) , specifically in the script getdata.php . The vulnerability allows an attacker to manipulate the id parameter to execute arbitrary SQL commands on the backend database. The NVD entry assigns a CVSS v2 bas...