Skip to content

CVE-2008-5820 SQL injection vulnerability in eDNews_view.php in eDreamers eDNews 2 allows remote attackers to execute arbitrary SQL commands via the newsid parameter.

HighCVSS 7.5 EPSS 1.0% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in eDNews_view.php in eDreamers eDNews 2 allows remote attackers to execute arbitrary SQL commands via the newsid parameter.

Affected products

ProductAffected versionsFixed in
edreamers ednews = 2.0 No fix listed

References

  • 33336 third-party-advisory vendor-advisory
  • 4863 third-party-advisory
  • 33054 vdb-entry
  • 7619 exploit