CVE-2008-3034 Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) IdFlux parameter to admin/fonctions/supprimer_flux.php and the (2) IdT...
HighCVSS 7.5
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) IdFlux parameter to admin/fonctions/supprimer_flux.php and the (2) IdTag parameter to admin/fonctions/supprimer_tag.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rss aggregator | = 1.0 | No fix listed |
References
- 3975 third-party-advisory
- 20080630 RSS-aggregator Multiple vulnerabilities mailing-list
- 30016 vdb-entry
- rssaggregator-idflux-idtag-sql-injection(43507) vdb-entry