CVE-2008-3372

CVE-2008-3372 describes an SQL injection in the Getacoder Clone’s file search_form.php where the attacker can inject via the sb_protype parameter. The underlying issue is a failure to properly sanitize input, enabling remote execution of arbitrary SQL commands. The NVD entry lists a base score of...