CVE-2008-0469 SQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newscat action.
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newscat action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tiger php news system | <= 1.0b | No fix listed |
References
- 28641 third-party-advisory vendor-advisory
- 3587 third-party-advisory
- 20080124 Tiger PHP News System SQL Injection mailing-list
- 27445 vdb-entry
- ADV-2008-0312 vdb-entry
- tigerphpnewssystem-catid-sql-injection(39908) vdb-entry
- 4984 exploit