CVE-2008-3491

SQL injection vulnerability in go.php in Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a report action.

Link	Resource
http://www.securityfocus.com/bid/30504	Exploit
http://www.securityfocus.com/bid/30505	Exploit
http://secunia.com/advisories/31345
http://secunia.com/advisories/31344
http://securityreason.com/securityalert/4117
http://osvdb.org/47333
https://exchange.xforce.ibmcloud.com/vulnerabilities/44176
https://exchange.xforce.ibmcloud.com/vulnerabilities/44175
https://www.exploit-db.com/exploits/6186
https://www.exploit-db.com/exploits/6185

Configuration 1

cpe:2.3:a:scripts24:ipost:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:scripts24:itgp:1.0.4:*:*:*:*:*:*:*

---

Published : 2008-08-06 05:41

Updated : 2017-09-29 01:31

---

NVD link : CVE-2008-3491

Mitre link : CVE-2008-3491

No products.

CWE-89