Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse p…

Published 17 y ago 2009-01-05 · modified 4 mo ago 2026-06-16 · JSON

CVSS

7.5

v2.0 · NVD

CISA KEV

not known exploited

EPSS

1.0%

percentile 64%

Public exploits

Exploit-DB

Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to (1) previews.php and (2) reviews.php, and the (3) id parameter to index.php in a viewarticle action.

Exploit prediction (EPSS)

1.02% probability of exploitation in the next 30 days, higher than 64% of all scored CVEs.

Exploits and detections

EDB-6540 iGaming CMS 1.5 - Multiple SQL Injections · webapps · 2008-09-23
EDB-14820 iGaming CMS - Multiple SQL Injections · webapps · 2010-08-27

CVSS scores

Assigned by	Version	Score	Vector
NVD	2.0	7.5	`AV:N/AC:L/Au:N/C:P/I:P/A:P`

Classification

Weakness

CWE-89 Improper Neutralization of Special Elements used in an SQL Command

References

exchange.xforce.ibmcloud.com /vulnerabilities/45366 · vdb-entry, x_refsource_XF, x_transferred
exploit-db.com /exploits/6540 · exploit, x_refsource_EXPLOIT-DB, x_transferred
securityfocus.com /bid/31340 · vdb-entry, x_refsource_BID, x_transferred
securityreason.com /securityalert/4867 · third-party-advisory, x_refsource_SREASON, x_transferred

Sources

CVE List: CVE-2008-5841
NVD: CVE-2008-5841

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.