CVEvulnerability
CVE-2008-4175
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-09-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php.
Affected configurations
• linkbidscript linkbidscript 1.5
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/31853 secunia.com
- http://securityreason.com/securityalert/4299 securityreason.com
- http://www.securityfocus.com/bid/31191 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45153 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45155 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6466 www.exploit-db.com
- http://secunia.com/advisories/31853 secunia.com
- http://securityreason.com/securityalert/4299 securityreason.com
- http://www.securityfocus.com/bid/31191 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45153 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45155 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6466 www.exploit-db.com