CVE-2008-2791

CVE-2008-2791

EPSS 1.0%

SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/30729 https://exchange.xforce.ibmcloud.com/vulnerabilities/43138 https://www.exploit-db.com/exploits/5834 http://www.securityfocus.com/bid/29768