Skip to content

CVE-2008-4716 SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL commands via the catid parameter.

HighCVSS 7.5 EPSS 0.97%
Published
Updated
Exploit status
No public exploit known

Description

SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL commands via the catid parameter.

Affected products

ProductAffected versionsFixed in
scriptdemo php-lance = 1.52 No fix listed

References

  • 32027 third-party-advisory vendor-advisory
  • 4500 third-party-advisory
  • 31446 exploit vdb-entry
  • 6605 exploit