← Database

CVE-2008-5952

MEDIUM CVSS: 6.0 Published: 2009-01-23 Modified: 2026-06-16

Description

SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a vtech action to the default URI.

Affected Platforms

Ktp Computer Customer Database Ktp Computer Customer Database

Weakness Type

CWE-89

References