CVE-2008-1758 Information

Description

SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the C_ID parameter to index.php.

Reference

http://secunia.com/advisories/29664 http://www.securityfocus.com/bid/28738 https://exchange.xforce.ibmcloud.com/vulnerabilities/41636 https://www.exploit-db.com/exploits/5353