Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2008-0129

Published: 08/01/2008 Updated: 29/09/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and previous versions allows remote malicious users to execute arbitrary SQL commands via the album_name parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

siteatschool siteatschool

Exploits

Exploit DB: Site@School 2.4.10 - Blind SQL Injection
<? /* -------------------------------------------------------- Site@School <= 2310 Remote Blind SQL Injection Exploit -------------------------------------------------------- author: EgiX mail: n0b0d13s[at]gmail[dot]com link: details: works with magic_quotes_gpc = off [-] Blind SQL Injection in /starnet/ ...

References

CWE-89http://www.securityfocus.com/bid/27120https://exchange.xforce.ibmcloud.com/vulnerabilities/39417https://www.exploit-db.com/exploits/4832https://nvd.nist.govhttps://www.exploit-db.com/exploits/4832/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3380CVE-2024-1694local file inclusionCVE-2024-5645CVE-2024-24919XSSCVE-2024-36774CVE-2024-21306SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook