3 matches found
Sql injection
SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via the suchanzahl parameter...
7.5CVSS9.1AI score0.01258EPSS
SaveExploits0References6Affected Software1
CVE-2008-3724
This CVE affects Papoo’s web application prior to version 3.7.2, where an SQL injection flaw exists in index.php exploitable via the suchanzahl parameter. The root cause is a vulnerable handling of input in index.php allowing remote arbitrary SQL execution. The vulnerability is documented in sour...
7.5CVSS8.4AI score0.01258EPSS
SaveExploits0References6Affected Software1
CVE-2008-3724: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via the suchanzahl parameter...
7.5CVSS6.4AI score0.01258EPSS
SaveExploits0References2
20