CVE-2008-6618

CVE-2008-6618 affects ClassSystem 2.3. The vulnerability consists of multiple SQL injection flaws allowing remote attackers to execute arbitrary SQL commands via the teacher_id parameter in class/HomepageMain.php and class/HomepageTop.php, and via the message_id parameter in class/MessageReply.ph...