CVE-2008-0878 SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action.
HighCVSS 7.5
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| runcms myannonces | All versions | No fix listed |
References
- 27902 vdb-entry
- ADV-2008-0619 vdb-entry
- myannonces-index-sql-injection(40861) vdb-entry
- 5156 exploit