CVE-2008-0371
published 2008-01-22CVE-2008-0371: Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL…
PriorityP434medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
1.11%
61.8th percentile
Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via (1) the mohit parameter to (a) inc/receivertwo.php; and allow remote attackers to execute arbitrary SQL commands via (2) the id parameter to (b) inc/usercp.php, related to functionz/usercp.php; or (3) the username parameter to (c) admin/index.php, related to functionz/first_process.php, or (d) index.php. NOTE: some of these details are obtained from third party information.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| alilg | alitalk | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/28515http://www.securityfocus.com/bid/27315https://exchange.xforce.ibmcloud.com/vulnerabilities/39733https://exchange.xforce.ibmcloud.com/vulnerabilities/39735https://exchange.xforce.ibmcloud.com/vulnerabilities/39736https://exchange.xforce.ibmcloud.com/vulnerabilities/39745https://www.exploit-db.com/exploits/4922http://secunia.com/advisories/28515http://www.securityfocus.com/bid/27315https://exchange.xforce.ibmcloud.com/vulnerabilities/39733https://exchange.xforce.ibmcloud.com/vulnerabilities/39735https://exchange.xforce.ibmcloud.com/vulnerabilities/39736https://exchange.xforce.ibmcloud.com/vulnerabilities/39745https://www.exploit-db.com/exploits/4922
2008-01-22
Published