CVE-2008-1404

Description

SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the kid parameter.

References

https://www.exploit-db.com/exploits/5254

https://exchange.xforce.ibmcloud.com/vulnerabilities/41216

http://secunia.com/advisories/29389

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS