CVE-2008-3749

CVE-2008-3749 describes an SQL injection vulnerability in tr.php of the YourFreeWorld Banner Management Script. The flaw allows remote attackers to execute arbitrary SQL commands by supplying manipulated input in the id parameter, leading to potential partial to complete data exposure or modifica...