CVE-2008-1272

2008-03-1023:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

43.9%

JSON

Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showad.php and the (2) ad parameter to pfriendly.php.

References

secunia.com/advisories/29297

www.securityfocus.com/bid/28159

exchange.xforce.ibmcloud.com/vulnerabilities/41066

www.exploit-db.com/exploits/5223