CVE-2008-3251

2008-07-2117:00:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.0%

JSON

Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the opp parameter to tampereunited/opponent.php; or the id parameter to (2) index.php, (3) player.php, (4) matchdetails.php, or (5) additionalpage.php in tampereunited/.

References

secunia.com/advisories/31111

securityreason.com/securityalert/4018

tpl-design.com/index.php

www.securityfocus.com/bid/30260

www.vupen.com/english/advisories/2008/2121/references

exchange.xforce.ibmcloud.com/vulnerabilities/43849

www.exploit-db.com/exploits/6088