CVE-2008-0616 DMSGuestbook <= 1.7.0 - SQL Injection
MediumCVSS 6.5
EPSS 4.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dmsguestbook project dmsguestbook | = 1.7.0 | No fix listed |
| wordpress dmsguestbook(WordPress) | All versions | No fix listed |
References
- 3615 third-party-advisory
- 20080202 Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities mailing-list third-party-advisory vdb-entry
- dmsguestbook-unspecified-sql-injection(40196) vdb-entry
- 5035 exploit third-party-advisory vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org