CVE-2008-6776 SQL injection vulnerability in viewcomments.php in Scripts For Sites (SFS) EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter.
HighCVSS 7.5
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in viewcomments.php in Scripts For Sites (SFS) EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| scripts-for-sites ez hot or not | All versions | No fix listed |
References
- 49540 exploit vdb-entry
- 32532 third-party-advisory vendor-advisory
- ezhotornot-viewcomments-sql-injection(46278) vdb-entry
- 6914 exploit