CVE-2008-1957 SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands via the nb parameter in voir mode.
HighCVSS 7.5
EPSS 1.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands via the nb parameter in voir mode.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| easyscripts tr script news | = 2.1 | No fix listed |
References
- 29814 third-party-advisory vendor-advisory
- 28876 vdb-entry
- ADV-2008-1319 vdb-entry
- trscriptnews-news-sql-injection(41946) vdb-entry
- 5483 exploit