CVE-2008-4332 SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrary SQL commands via the idcat parameter to showtopic.php.
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrary SQL commands via the idcat parameter to showtopic.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cannot php infoboard | = v.7 | No fix listed |
References
- 31977 third-party-advisory
- 31405 exploit vdb-entry
- phpinfoboard-showtopic-sql-injection(45440) vdb-entry
- 6566 exploit