CVE-2008-1650

2008-04-0217:00:00

mitre

www.cve.org

AI Score

8.3

Confidence

Low

EPSS

0.003

Percentile

69.9%

JSON

SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL commands via the read parameter in an edp_Help_Internal_News action.

References

secunia.com/advisories/29624

securityreason.com/securityalert/3793

www.securityfocus.com/archive/1/490338/100/0/threaded

www.securityfocus.com/bid/28542

exchange.xforce.ibmcloud.com/vulnerabilities/41590

www.exploit-db.com/exploits/5333