Security Advisory

CVE-2008-6078

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-02-06 11:00:00
Last updated 2024-08-07 11:20:24
Assigner mitre
State PUBLISHED

Description

SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a pms action to index.php.