CVE-2008-3413

Опубликовано: 31 июл. 2008

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in category.php in Greatclone GC Auction Platinum allows remote attackers to execute arbitrary SQL commands via the cate_id parameter.

Комментарий

Additional source found during analysis:

http://www.securityfocus.com/bid/30389

Ссылки

http://secunia.com/advisories/31241
Vendor Advisory
http://securityreason.com/securityalert/4091
http://www.securityfocus.com/bid/30389
http://www.vupen.com/english/advisories/2008/2216/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/44024
https://www.exploit-db.com/exploits/6144
http://secunia.com/advisories/31241
Vendor Advisory
http://securityreason.com/securityalert/4091
http://www.securityfocus.com/bid/30389
http://www.vupen.com/english/advisories/2008/2216/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/44024
https://www.exploit-db.com/exploits/6144

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:greatclone:auction_platinum:*:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00897

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-g8wp-9hw5-m25j

github

почти 4 года назад