CVE-2008-0430 – 360 Web Manager 3.0 - 'IDFM' SQL Injection

https://notcve.org/view.php?id=CVE-2008-0430

SQL injection vulnerability in form.php in 360 Web Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the IDFM parameter. Vulnerabilidad de inyección SQL en form.php de 360 Web Manager 3.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro IDFM. • https://www.exploit-db.com/exploits/4944 http://www.securityfocus.com/bid/27364 http://www.vupen.com/english/advisories/2008/0217 https://exchange.xforce.ibmcloud.com/vulnerabilities/39796 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •