CVE-2008-4091

CVE-2008-4091 describes an SQL injection vulnerability in the web directory script’s index.php (version 1.5.3). The issue allows remote attackers to inject arbitrary SQL via the site parameter in an open action, enabling potentially unauthorized database queries. The available documents confirm t...