CVE

Id
33020  
CVE No.
CVE-2008-2903  
Status
Candidate  
Description
SQL injection vulnerability in news.php in Advanced Webhost Billing System (AWBS) 2.3.3 through 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter.  
Phase
Assigned (20080630)  
Votes
None (candidate not yet proposed)  
Comments