CVE-2008-4157

🗓️ 22 Sep 2008 16:20:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 72 Views🌐 WEB

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2008-4157	10 Sep 200800:00	–	circl
Cvelist	CVE-2008-4157	22 Sep 200816:20	–	cvelist
Exploit DB	PHPVID 1.2.3 - Multiple Vulnerabilities	12 Aug 201300:00	–	exploitdb
Exploit DB	PHPVID 1.1 - Cross-Site Scripting / SQL Injection	10 Sep 200800:00	–	exploitdb
EUVD	EUVD-2008-4140	7 Oct 202500:30	–	euvd
NVD	CVE-2008-4157	22 Sep 200818:34	–	nvd
Prion	Sql injection	22 Sep 200818:34	–	prion
Prion	Sql injection	19 Aug 201321:10	–	prion
Prion	Sql injection	20 Mar 201514:59	–	prion
RedhatCVE	CVE-2013-5311	22 May 202511:23	–	redhatcve

NVD

Node

Source	Link
seclists	www.seclists.org/fulldisclosure/2015/Mar/58
packetstormsecurity	www.packetstormsecurity.com/files/130754/Vastal-I-tech-phpVID-1.2.3-SQL-Injection.html
vupen	www.vupen.com/english/advisories/2008/2552
packetstormsecurity	www.packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html
exploit-db	www.exploit-db.com/exploits/27519
exploit-db	www.exploit-db.com/exploits/6422
tetraph	www.tetraph.com/security/sql-injection-vulnerability/vastal-i-tech-phpvid-1-2-3-sql-injection-security-vulnerabilities/
securityfocus	www.securityfocus.com/bid/31108
secunia	www.secunia.com/advisories/31761
osvdb	www.osvdb.org/show/osvdb/48018

Parameter	Position	Path	Description	CWE
cat	query param	groups.php	Blind SQL Injection in groups.php via cat parameter	CWE-89
query	query param	search_results.php	Cross Site Scripting in search_results.php via query parameter	CWE-89

16 Jun 2026 22:57Current

8.1High risk

Vulners AI Score8.1

CVSS 27.5

EPSS0.05648