CVE
- Id
- 36592
- CVE No.
- CVE-2008-6475
- Status
- Candidate
- Description
- SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and earlier allows remote attackers to execute arbitrary SQL commands via the Via HTTP header (HTTP_VIA) to index.php.
- Phase
- Assigned (20090316)
- Votes
- None (candidate not yet proposed)
- Comments