CVEvulnerability
CVE-2008-1496
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to (a) membre.php, and the (2) timestamp parameter to (b) the details action in achat/historique_commandes.php and (c) the facture action in factures/facture_html.php.
Affected configurations
• peel peel 1.0b
• peel peel 2.6
• peel peel 2.7
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://realn.free.fr/releases/70207 Exploit
- http://secunia.com/advisories/29466 Vendor Advisory
- http://www.securityfocus.com/bid/28346 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41341 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41353 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5281 www.exploit-db.com
- http://realn.free.fr/releases/70207 Exploit
- http://secunia.com/advisories/29466 Vendor Advisory
- http://www.securityfocus.com/bid/28346 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41341 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41353 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5281 www.exploit-db.com