EUVD-2008-4140

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

SQL injection in Vastal I-Tech phpVID 1.1 allows arbitrary SQL commands via cat parameter

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2008-4157	10 Sep 200800:00	–	circl
CVE	CVE-2008-4157	22 Sep 200816:20	–	cve
Cvelist	CVE-2008-4157	22 Sep 200816:20	–	cvelist
NVD	CVE-2008-4157	22 Sep 200818:34	–	nvd
Prion	Sql injection	22 Sep 200818:34	–	prion
Prion	Sql injection	19 Aug 201321:10	–	prion
Prion	Sql injection	20 Mar 201514:59	–	prion
RedhatCVE	CVE-2013-5311	22 May 202511:23	–	redhatcve
RedhatCVE	CVE-2015-2563	22 May 202509:28	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "ee74609e-b052-3c50-9eb4-b86ee29966b4",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "aced3e48-4662-3def-a82a-ebe23163e7e0",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/27519
vupen	www.vupen.com/english/advisories/2008/2552
securityreason	www.securityreason.com/securityalert/4291
packetstormsecurity	www.packetstormsecurity.com/files/130754/Vastal-I-tech-phpVID-1.2.3-SQL-Injection.html
osvdb	www.osvdb.org/show/osvdb/48018
securityfocus	www.securityfocus.com/bid/31108
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/45028
tetraph	www.tetraph.com/security/sql-injection-vulnerability/vastal-i-tech-phpvid-1-2-3-sql-injection-security-vulnerabilities/
secunia	www.secunia.com/advisories/31761
packetstormsecurity	www.packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 27.5

EPSS0.02781