CVE-2008-2995 Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands via (1) the annuaire parameter to annuaire.php or (2) the username field in admin/l...
HighCVSS 7.5
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands via (1) the annuaire parameter to annuaire.php or (2) the username field in admin/login.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpeasydata | = 1.5.4 | No fix listed |
References
- 3969 third-party-advisory
- 20080610 PHPEasyData 1.5.4 Multiple Vulnerabilities mailing-list
- 29659 exploit vdb-entry