CVEvulnerability
CVE-2008-3191
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-07-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) City, (2) Interest, (3) Email, (4) Icq, (5) msn, or (6) Yahoo Messenger field in an edit_profile action.
Affected configurations
• marcioforum mforum 0.1a
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://securityreason.com/securityalert/4003 securityreason.com
- http://www.securityfocus.com/bid/30214 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43757 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6068 www.exploit-db.com
- http://securityreason.com/securityalert/4003 securityreason.com
- http://www.securityfocus.com/bid/30214 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43757 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6068 www.exploit-db.com