CVEvulnerability
CVE-2008-2521
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-06-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authenticated users to execute arbitrary SQL commands via the fid parameter.
Affected configurations
• yabsoft mega file hosting script 1.2
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/30210 Vendor Advisory
- http://www.securityfocus.com/bid/29167 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42355 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5598 www.exploit-db.com
- http://secunia.com/advisories/30210 Vendor Advisory
- http://www.securityfocus.com/bid/29167 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42355 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5598 www.exploit-db.com