Skip to content

CVE-2008-3945 SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action.

HighCVSS 7.5 EPSS 1.00% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action.

Affected products

ProductAffected versionsFixed in
source workshop words tag script = 1.2 No fix listed

References

  • 31653 third-party-advisory vendor-advisory
  • 4225 third-party-advisory
  • 6336 exploit