CVE-2008-0422

SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Date published : 2008-01-23

http://www.securityfocus.com/bid/27369

http://www.securityfocus.com/bid/32379