CVE-2008-7120

2009-08-2815:00:00

mitre

www.cve.org

sql injection

mr. cgi guy

hot links sql-php 3

remote attackers

arbitrary sql commands

AI Score

8.4

Confidence

Low

EPSS

0.001

Percentile

30.9%

JSON

SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter.

References

www.packetstormsecurity.org/0809-exploits/hotlinks-sql.txt

www.securityfocus.com/bid/31118