Comicshout · Comicshout · CVE-2008-2456
Name of the Vulnerable Software and Affected Versions:
ComicShout versions 2.5 and earlier
Description:
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `comic id` parameter in the "index.php" endpoint.
Recommendations:
For ComicShout versions 2.5 and earlier, update to a version later than 2.5 to resolve the issue. As a temporary workaround, consider restricting access to the `comic id` parameter in the "index.php" endpoint until a patch is available.