CVE-2008-5768 SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.
HighCVSS 7.5
EPSS 0.97%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sirium am events module | = 0.22 | No fix listed |
References
- 4854 third-party-advisory
- 32848 exploit vdb-entry
- amevents-print-sql-injection(47360) vdb-entry
- 7479 exploit