CVE-2008-4902

CVE-2008-4902 is an SQL injection vulnerability in Article Publisher Pro 1.5 ’s file contact_author.php , exploitable via the userid parameter to execute arbitrary SQL commands remotely. The NVD entry lists a NETWORK attack vector with LOW complexity and no authentication, yielding Partial impact...

CVE-2008-4901

The CVE-2008-4901 entry documents a SQL injection in Article Publisher Pro 1.5. Affected component: admin/admin.php, parameter username. Root cause is improper handling of user-supplied input enabling arbitrary SQL execution by remote attackers. Impact is partial confidentiality, integrity, and a...