CVE-2008-4091 SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action.
MediumCVSS 6.8
EPSS 0.95%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| source workshop web directory script | = 1.5.3 | No fix listed |
References
- 31629 third-party-advisory vendor-advisory
- 30941 vdb-entry
- webdirectoryscript-index-sql-injection(45185) vdb-entry
- 6335 exploit