CVE-2008-5841 Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to (1) previews.php and (2) reviews.php, and the (3)...
HighCVSS 7.5
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to (1) previews.php and (2) reviews.php, and the (3) id parameter to index.php in a viewarticle action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| igamingcms igaming cms | <= 1.5 | No fix listed |
| igamingcms igaming cms | = 1.3.1 | No fix listed |
| igamingcms igaming cms | = 1.4.2 | No fix listed |
References
- 4867 third-party-advisory
- 31340 vdb-entry
- igamingcms-previews-sql-injection(45366) vdb-entry
- 6540 exploit