CVE-2008-0873 SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in an Adsview action.
HighCVSS 7.5
EPSS 0.97%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in an Adsview action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jlmzone classifieds | = 1.0 | No fix listed |
References
- 3681 third-party-advisory
- 20080219 XOOPS Module classifieds SQL Injection(cid) mailing-list
- 27895 exploit vdb-entry
- 5158 exploit