Security Advisory
CVE-2008-6381
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute arbitrary SQL commands via the cid parameter.