NetSight
high7.5

CVE-2008-3393

SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute arbitrary SQL commands via the events_id parameter.

Impact

SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute arbitrary SQL commands via the events_id parameter.

Affected products

VendorProductAffected versions
InfominingBookmine
All versions

Weakness classification

References