CVEvulnerability
CVE-2008-0363
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-01-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to postcomment.php and the (2) album parameter to gallery.php.
Affected configurations
• clever copy clever copy (<= 3.0)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/28560 secunia.com
- http://securityreason.com/securityalert/3553 securityreason.com
- http://www.securityfocus.com/archive/1/486492/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27335 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39746 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/28560 secunia.com
- http://securityreason.com/securityalert/3553 securityreason.com
- http://www.securityfocus.com/archive/1/486492/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27335 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39746 exchange.xforce.ibmcloud.com