CVE

Id
76296  
CVE No.
CVE-2014-8995  
Status
Candidate  
Description
SQL injection vulnerability in Maarch LetterBox 2.8 allows remote attackers to execute arbitrary SQL commands via the UserId cookie.  
Phase
Assigned (20141119)  
Votes
None (candidate not yet proposed)  
Comments