Description
SQL injection vulnerability in inc/module/online.php in Easy-Clanpage 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a user details action, a different vector than CVE-2008-1425.
References
- 28329 vdb-entry
- 3773 third-party-advisory
- 20080320 Easy-Clanpage 2.2 (id) Remote SQL Injection Vulnerability mailing-list