CVEvulnerability
CVE-2008-1726
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-04-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kqid parameter to (a) articletext.php and (b) articletextonly.php and the (2) username parameter to (c) logincheck.php.
Affected configurations
• myknowledgequest knowledgequest 2.6
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/29716 Vendor Advisory
- http://www.osvdb.org/44254 www.osvdb.org
- http://www.osvdb.org/44255 www.osvdb.org
- http://www.osvdb.org/44256 www.osvdb.org
- http://www.securityfocus.com/bid/28713 Exploit
- http://www.securityfocus.com/bid/28716 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41746 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5421 www.exploit-db.com
- http://secunia.com/advisories/29716 Vendor Advisory
- http://www.osvdb.org/44254 www.osvdb.org
- http://www.osvdb.org/44255 www.osvdb.org
- http://www.osvdb.org/44256 www.osvdb.org
- http://www.securityfocus.com/bid/28713 Exploit
- http://www.securityfocus.com/bid/28716 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41746 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5421 www.exploit-db.com