CVEvulnerability
CVE-2008-1404
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-03-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the kid parameter.
Affected configurations
• exv2 exv2 2.0.3
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/29389 Vendor Advisory
- http://www.securityfocus.com/bid/28255 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41216 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5254 www.exploit-db.com
- http://secunia.com/advisories/29389 Vendor Advisory
- http://www.securityfocus.com/bid/28255 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41216 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5254 www.exploit-db.com