cpe:/a:flds_script:flds:1.2a CVE-2008-5779 2008-12-30T15:30:01.920-05:00 2017-09-28T21:32:48.337-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2008-12-31T11:18:00.000-05:00 ALLOWS_OTHER_ACCESS BID 32835 SECUNIA 33075 SREASON 4849 OSVDB 50723 EXPLOIT-DB 7474 SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands via the id parameter.