CVE-2008-3254

Publication date

2008-07-22 16:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in index.php in preCMS 1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a UserProfil action.