CVE-2008-5489

EPSS 1.2%

SQL injection vulnerability in channel_detail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to execute arbitrary SQL commands via the chid parameter.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/24894unverified cve_referencewww.exploit-db.com/exploits/7128unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/32723 http://securityreason.com/securityalert/4713 https://exchange.xforce.ibmcloud.com/vulnerabilities/46629 https://www.exploit-db.com/exploits/7128 http://www.securityfocus.com/bid/32311 http://www.vupen.com/english/advisories/2008/3170