CVE-2008-0714

2008-02-1201:00:00

mitre

www.cve.org

8.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.8%

JSON

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lost_password_go action.

References

secunia.com/advisories/28803

www.securityfocus.com/bid/27651

exchange.xforce.ibmcloud.com/vulnerabilities/40289

www.exploit-db.com/exploits/5074