CVE-2008-3598

Description

Multiple SQL injection vulnerabilities in psipuss 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the Cid parameter to categories.php or (2) the Username parameter to login.php.

References

https://www.exploit-db.com/exploits/6226

https://exchange.xforce.ibmcloud.com/vulnerabilities/44367

http://securityreason.com/securityalert/4140

http://secunia.com/advisories/25041/

http://osvdb.org/35500

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS