CVE-2008-2084 – RunCMS Module MyArticles 0.6 Beta-1 - SQL Injection

https://notcve.org/view.php?id=CVE-2008-2084

SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a listarticles action. Vulnerabilidad de inyección SQL en topics.php del módulo MyArticles 0.6 beta-1 para RunCMS permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro topic_id en una acción listarticles. • https://www.exploit-db.com/exploits/5505 http://www.securityfocus.com/bid/28952 https://exchange.xforce.ibmcloud.com/vulnerabilities/42016 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •