Skip to content

CVE-2008-5586 SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sear...

MediumCVSS 6.8 EPSS 0.95%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter.

Affected products

ProductAffected versionsFixed in
check up check new = 4.52 No fix listed

References

  • 32958 third-party-advisory vendor-advisory
  • 4736 third-party-advisory
  • 32590 vdb-entry
  • 7328 exploit