CVE-2008-2084 SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a listarticles action.
HighCVSS 7.5
EPSS 2.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a listarticles action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| myarticles | = 0.6-beta1 | No fix listed |
| runcms myarticles module | = 0.6-beta1 | No fix listed |
References
- 28952 exploit vdb-entry
- myarticles-topics-sql-injection(42016) vdb-entry
- 5505 exploit