CVEvulnerability
CVE-2008-4355
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-09-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected configurations
• powie pforum 1.30
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/31872 Vendor Advisory
- http://www.securityfocus.com/bid/31150 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/2559 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45079 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6442 www.exploit-db.com
- http://secunia.com/advisories/31872 Vendor Advisory
- http://www.securityfocus.com/bid/31150 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/2559 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45079 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6442 www.exploit-db.com