CVEvulnerability
CVE-2008-3598
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in psipuss 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the Cid parameter to categories.php or (2) the Username parameter to login.php.
Affected configurations
• psi-labs psipuss 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/35500 osvdb.org
- http://secunia.com/advisories/25041/ secunia.com
- http://securityreason.com/securityalert/4140 securityreason.com
- http://www.securityfocus.com/bid/30629 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44367 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6226 www.exploit-db.com
- http://osvdb.org/35500 osvdb.org
- http://secunia.com/advisories/25041/ secunia.com
- http://securityreason.com/securityalert/4140 securityreason.com
- http://www.securityfocus.com/bid/30629 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44367 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6226 www.exploit-db.com