CVE-2008-4350

EPSS 1.1%

SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6446unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/48107 http://secunia.com/advisories/31829 https://exchange.xforce.ibmcloud.com/vulnerabilities/45108 https://www.exploit-db.com/exploits/6446 http://www.securityfocus.com/bid/31157 http://www.vupen.com/english/advisories/2008/2563