CVEvulnerability
CVE-2008-5841
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-01-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to (1) previews.php and (2) reviews.php, and the (3) id parameter to index.php in a viewarticle action.
Affected configurations
• igamingcms igaming cms (<= 1.5)
• igamingcms igaming cms 1.3.1
• igamingcms igaming cms 1.4.2
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://securityreason.com/securityalert/4867 securityreason.com
- http://www.securityfocus.com/bid/31340 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45366 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6540 www.exploit-db.com
- http://securityreason.com/securityalert/4867 securityreason.com
- http://www.securityfocus.com/bid/31340 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45366 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6540 www.exploit-db.com