CVE-2008-5490

CVE-2008-5490 describes an SQL injection in the PHPStore Yahoo Answers site, specifically in the file index.php where the vulnerable parameter is the id parameter. The underlying cause, as stated in the public records, is improper handling/sanitization of user-supplied input, enabling remote atta...