CVE-2008-2506

CVE-2008-2506: Multiple SQL injection vulnerabilities in Simpel Side Weblosning (versions 1–4) allow remote attackers to execute arbitrary SQL commands via the (1) mainid and (2) id parameters to index2.php. Root cause is improper handling of user-supplied input in those parameters, leading to au...