CVE-2008-6464 SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mevin basic-php-events-lister | = 1.0 | No fix listed |
References
- 48499 vdb-entry
- 31779 third-party-advisory
- 31278 exploit patch vdb-entry
- ADV-2008-2648 vdb-entry
- 6508 exploit