CVE-2008-1639 SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle....
HighCVSS 7.5
EPSS 0.97%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/lib_article.include.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| neat web neat-web | = 0.2 | No fix listed |
References
- 28534 exploit vdb-entry
- ADV-2008-1053 vdb-entry
- neatweblog-index-sql-injection(41555) vdb-entry
- 5331 exploit