CVE-2008-0429

2008-01-2321:00:00

mitre

www.cve.org

8.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.7%

JSON

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forum_catview action.

References

secunia.com/advisories/28581

www.securityfocus.com/bid/27381

www.vupen.com/english/advisories/2008/0231

exchange.xforce.ibmcloud.com/vulnerabilities/39820

www.exploit-db.com/exploits/4956

www.exploit-db.com/exploits/6401