CVEvulnerability
CVE-2008-0873
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-02-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in an Adsview action.
Affected configurations
• jlmzone classifieds 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://securityreason.com/securityalert/3681 securityreason.com
- http://www.securityfocus.com/archive/1/488357/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27895 Exploit
- https://www.exploit-db.com/exploits/5158 www.exploit-db.com
- http://securityreason.com/securityalert/3681 securityreason.com
- http://www.securityfocus.com/archive/1/488357/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27895 Exploit
- https://www.exploit-db.com/exploits/5158 www.exploit-db.com