CVE-2008-3752

CVE-2008-3752 describes a SQL injection in tr.php of the YourFreeWorld Ad-Exchange Script, allowing remote attackers to execute arbitrary SQL commands through the id parameter. The issue is confirmed in multiple sources (NVD entry with CVSS v2 base score 7.5, high impact: partial confidentiality,...