2 matches found
CVE-2008-6115
CVE-2008-6115 corresponds to a SQL injection vulnerability in Prozilla Hosting Index: directory.php is vulnerable to remote exploitation via the id parameter in a deadlink action, allowing arbitrary SQL execution. This is documented in NVD with description: SQL injection vulnerability in director...
CVE-2008-2083
SQL injection in Prozilla Hosting Index directory.php when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL via the cat_id parameter in a list action. Affected component: directory.php of Prozilla Hosting Index. Root cause: input unsanitization/SQL construction exp...