CVE-2008-2874

Description

SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbjoke_id parameter, a different vector than CVE-2008-1050.

References

https://www.exploit-db.com/exploits/5934

https://exchange.xforce.ibmcloud.com/vulnerabilities/43359

http://www.vupen.com/english/advisories/2008/1951/references

http://www.securityfocus.com/bid/29931

http://secunia.com/advisories/30810

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS