← back
CVE-2008-2087

CVE-2008-2087

EPSS 1.4%
SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the host_id parameter, a different vector than CVE-2005-3817.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/5517unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://advisories.echo.or.id/adv/adv89-K-159-2008.txthttp://secunia.com/advisories/29983http://securityreason.com/securityalert/3855https://exchange.xforce.ibmcloud.com/vulnerabilities/42096https://www.exploit-db.com/exploits/5517http://www.securityfocus.com/archive/1/491396/100/0/threadedhttp://www.securityfocus.com/bid/28971