CVE-2008-1864

CVE-2008-1864 describes an SQL injection in Prozilla Freelancers on project.php, exploitable via the project parameter. The underlying flaw allows remote attackers to execute arbitrary SQL commands, with partial confidentiality, integrity, and availability impact as indicated in the cited reports...