CVE-2008-4345

CVE-2008-4345

EPSS 1.0%

SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://secunia.com/advisories/31784 https://exchange.xforce.ibmcloud.com/vulnerabilities/45113 https://www.exploit-db.com/exploits/6443 http://www.securityfocus.com/bid/31156 http://www.vupen.com/english/advisories/2008/2560