CVE-2008-5197

SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter in a detail_adverts action.

Link	Resource
http://www.securityfocus.com/bid/29995	Third Party Advisory VDB Entry
http://securityreason.com/securityalert/4640	Exploit Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43561	Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/5961	Exploit Third Party Advisory

Configuration 1

cpe:2.3:a:php-fusion:php-fusion:-:*:*:*:*:*:*:*

---

Published : 2008-11-21 05:30

Updated : 2021-04-21 03:02

---

NVD link : CVE-2008-5197

Mitre link : CVE-2008-5197

No products.

CWE-89