CVE-2008-3942

CVE-2008-3942 is a SQL injection vulnerability in landsee.php of the Full PHP Emlak Script, allowing remote SQL command execution via the id parameter. The root cause is unsafe SQL construction in landsee.php. The CVSS base score in NVD is 7.5 (HIGH) with network access, low attack complexity, an...

CVE-2008-6133

CVE-2008-6133 and CVE-2008-3942 describe SQL injection flaws in Full PHP Emlak Script. CVE-2008-6133 targets arsaprint.php via the id parameter (a different vector than CVE-2008-3942); CVE-2008-3942 targets landsee.php via the id parameter. Both allow remote attackers to execute arbitrary SQL com...