CVE-2008-5131 Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute arbitrary SQL commands via (1) the aid parameter to article_details.php, and the...
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute arbitrary SQL commands via (1) the aid parameter to article_details.php, and the (2) username and (3) password to the admin panel (admin/index.php).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| develop it easy news and article system | = 1.4 | No fix listed |
References
- 32595 third-party-advisory vendor-advisory
- 4607 third-party-advisory
- 32144 vdb-entry
- newsarticlesystem-article-sql-injection(46397) vdb-entry
- 7014 exploit