CVE-2008-2907

CVE-2008-2907 describes a SQL injection in WebChamado 1.1 (admin/index.php) where, if magic_quotes_gpc is disabled, an attacker can inject arbitrary SQL via the eml parameter. The CVSS v2 base score is 6.8 (MEDIUM). Connected sources confirm the vulnerable component and input vector; explicit rem...

CVE-2008-2858

The CVE-2008-2858 entry documents a SQL injection in WebChamado 1.1, occurring in index.php via the eml parameter. The underlying issue is an injection vulnerability that could allow a remote attacker to execute arbitrary SQL commands. Affected component: WebChamado 1.1 (index.php). Root cause de...

CVE-2008-2906

CVE-2008-2906 describes an SQL injection in WebChamado 1.1 affecting the file lista_anexos.php, exploitable via the tsk_id parameter. The underlying flaw allows remote attackers to “execute arbitrary SQL commands” against the application's database, with the CVSS v2 base score of 6.8 (Medium) and...