CVE-2008-1404 SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the kid parameter.
MediumCVSS 6.8
EPSS 0.91%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the kid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| exv2 | = 2.0.3 | No fix listed |
References
- 29389 third-party-advisory vendor-advisory
- 28255 exploit vdb-entry
- viso-index-sql-injection(41216) vdb-entry
- 5254 exploit