CVE-2008-3025 SQL injection vulnerability in ad.php in plx Ad Trader 3.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter in a redir action.
HighCVSS 7.5
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in ad.php in plx Ad Trader 3.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter in a redir action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| plx web studio plx ad trader | = 3.2 | No fix listed |
References
- 30897 third-party-advisory vendor-advisory
- 30046 vdb-entry
- plxadtrader-ad-sql-injection(43525) vdb-entry
- 5988 exploit