Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to (1) previews.php and (2) reviews.php, and the (3) id parameter to index.php in a viewarticle action.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2009-01-05 08:30
Updated : 2017-09-28 18:32
NVD link : CVE-2008-5841
Mitre link : CVE-2008-5841
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
igamingcms
- igaming_cms