CVE-2008-0538

Multiple SQL injection vulnerabilities in phpIP Management 4.3.2 allow remote attackers to execute arbitrary SQL commands via the (1) password parameter to login.php, the (2) id parameter to display.php, and unspecified other vectors. NOTE: some of these details are obtained from third party information.

Link	Resource
http://marc.info/?l=full-disclosure&m=120139657100513&w=2
http://secunia.com/advisories/28656	Vendor Advisory
http://www.securityfocus.com/bid/27468
http://www.vupen.com/english/advisories/2008/0346
https://exchange.xforce.ibmcloud.com/vulnerabilities/39965
https://www.exploit-db.com/exploits/4990
http://www.securityfocus.com/archive/1/487122/100/0/threaded

Configuration 1

cpe:2.3:a:phpip:phpip_management:4.3.2:*:*:*:*:*:*:*

---

Published : 2008-02-01 08:00

Updated : 2018-10-15 10:01

---

NVD link : CVE-2008-0538

Mitre link : CVE-2008-0538

No products.

CWE-89