CVE-2008-6434

Publication date

2009-03-06 18:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrary SQL commands via the LinkServID parameter.