CVE-2008-4175 Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/e...
MediumCVSS 6.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linkbidscript | = 1.5 | No fix listed |
References
- 31853 third-party-advisory
- 4299 third-party-advisory
- 31191 vdb-entry
- linkbidscript-upgrade-sql-injection(45153) vdb-entry
- linkbidscript-edit-sql-injection(45155) vdb-entry
- 6466 exploit