CVE-2008-3507 SQL injection vulnerability in index.php in LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action.
HighCVSS 7.5
EPSS 1.00%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in index.php in LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wogan may litenews | = 0.1 | No fix listed |
| wogan may litenews | = 1.1 | No fix listed |
| wogan may litenews | = 1.2 | No fix listed |
References
- 30575 vdb-entry
- litenews-id-sql-injection(44230) vdb-entry
- 6207 exploit