CVEvulnerability
CVE-2008-0538
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-02-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in phpIP Management 4.3.2 allow remote attackers to execute arbitrary SQL commands via the (1) password parameter to login.php, the (2) id parameter to display.php, and unspecified other vectors. NOTE: some of these details are obtained from third party information.
Affected configurations
• phpip phpip management 4.3.2
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://marc.info/?l=full-disclosure&m=120139657100513&w=2 marc.info
- http://secunia.com/advisories/28656 Vendor Advisory
- http://www.securityfocus.com/archive/1/487122/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27468 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0346 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39965 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4990 www.exploit-db.com
- http://marc.info/?l=full-disclosure&m=120139657100513&w=2 marc.info
- http://secunia.com/advisories/28656 Vendor Advisory
- http://www.securityfocus.com/archive/1/487122/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27468 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0346 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39965 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4990 www.exploit-db.com