CVE-2008-3366

SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2008-1774.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:pligg:pligg_cms:9.9.0:*:*:*:*:*:*:*
cpe:2.3:a:pligg:pligg_cms:9.9.0:beta:*:*:*:*:*:*

Information

Published : 2008-07-30 10:41

Updated : 2017-09-28 18:31


NVD link : CVE-2008-3366

Mitre link : CVE-2008-3366


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

pligg

  • pligg_cms