CVE-2008-4355

Description

SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

References

https://www.exploit-db.com/exploits/6442

https://exchange.xforce.ibmcloud.com/vulnerabilities/45079

http://www.vupen.com/english/advisories/2008/2559

http://www.securityfocus.com/bid/31150

http://secunia.com/advisories/31872

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS