Becontent · Becontent · CVE-2008-0921
**Name of the Vulnerable Software and Affected Versions**
beContent version 0.3.1
**Description**
A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the news.php file.
**Recommendations**
For beContent version 0.3.1, avoid using the `id` parameter in the news.php file until a fix is available. Consider restricting access to the news.php file to minimize the risk of exploitation.