7.5high
CVE-2008-43321 exploit
SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrar…
Published 18 y ago · modified 4 mo ago · JSON
CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.0%
percentile 81%
Public exploits
1
Exploit-DB
Summary
SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrary SQL commands via the idcat parameter to showtopic.php.
Exploit prediction (EPSS)
1.99% probability of exploitation in the next 30 days, higher than 81% of all scored CVEs.
Exploits and detections
- EDB-6566 PHP infoboard 7 plus - Multiple Vulnerabilities · webapps · 2008-09-25
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command
References
- exchange.xforce.ibmcloud.com /vulnerabilities/45440 · vdb-entry, x_refsource_XF, x_transferred
- secunia.com /advisories/31977 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- exploit-db.com /exploits/6566 · exploit, x_refsource_EXPLOIT-DB, x_transferred
- securityfocus.com /bid/31405 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2008-4332
- NVD: CVE-2008-4332
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.