CVE-2008-1909 SQL injection vulnerability in comment.php in PHP Knowledge Base (PHPKB) 1.5 and 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
HighCVSS 7.5
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in comment.php in PHP Knowledge Base (PHPKB) 1.5 and 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chadha software technologies phpkb knowledge base | = 1.5 | No fix listed |
| chadha software technologies phpkb knowledge base | = 2.0 | No fix listed |
References
- 29791 third-party-advisory vendor-advisory
- 28739 exploit vdb-entry
- phpkb-comment-sql-injection(41769) vdb-entry
- 5428 exploit