CVE-2008-4880

Description

SQL injection vulnerability in prodshow.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-4879.

References

https://www.exploit-db.com/exploits/6958

https://exchange.xforce.ibmcloud.com/vulnerabilities/46305

http://www.vupen.com/english/advisories/2008/2976

http://securityreason.com/securityalert/4548

http://osvdb.org/49533

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS