CVE-2008-6781

Description

SQL injection vulnerability in directory.php in Sites for Scripts (SFS) Gaming Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.

References

https://www.exploit-db.com/exploits/6906

https://www.exploit-db.com/exploits/6894

https://exchange.xforce.ibmcloud.com/vulnerabilities/46251

https://exchange.xforce.ibmcloud.com/vulnerabilities/46250

http://secunia.com/advisories/32558

http://osvdb.org/49553

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS