CVE-2008-2968 SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the book_id parameter.
HighCVSS 7.5
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the book_id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yektaweb academic web tools | <= 1.4.2.8 | No fix listed |
| yektaweb academic web tools | <= 1.4.3.1 | No fix listed |
References
- 30763 third-party-advisory vendor-advisory
- 3959 third-party-advisory
- www.bugreport.ir
- 20080619 Academic Web Tools CMS <= 1.4.2.8 Multiple Vulnerabilities mailing-list
- 29813 vdb-entry
- academicwebtools-rating-sql-injection(43177) vdb-entry