CVE-2008-1316
published 2008-03-13CVE-2008-1316: SQL injection vulnerability in qtf_ind_search_ov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers to execute arbitrary SQL commands via…
PriorityP335medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
0.91%
55.6th percentile
SQL injection vulnerability in qtf_ind_search_ov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| qt-cute | quicktalk_forum | <= 1.6 | — |
| qt-cute | quicktalk_forum | — | — |
| qt-cute | quicktalk_forum | — | — |
| qt-cute | quicktalk_forum | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
ghsa5.0MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Apache ODE Path Traversal vulnerability
ghsa·2022-05-14·CVSS 5.0
CVE-2018-1316 [MEDIUM] CWE-22 Apache ODE Path Traversal vulnerability
Apache ODE Path Traversal vulnerability
The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directory traversal, resulting in the potential writing of files under unwanted locations, the overwriting of existing files or their deletion. This issue was addressed in Apache ODE 1.3.3 which was released in 2009, however the incorrect name CVE-2008-2370 was used on the advisory by mistake.
GHSA
GHSA-8pwq-3qrm-7jfv: SQL injection vulnerability in qtf_ind_search_ov
ghsa_unreviewed·2022-05-01
CVE-2008-1316 [MEDIUM] CWE-89 GHSA-8pwq-3qrm-7jfv: SQL injection vulnerability in qtf_ind_search_ov
SQL injection vulnerability in qtf_ind_search_ov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/29288http://www.securityfocus.com/bid/28215https://exchange.xforce.ibmcloud.com/vulnerabilities/41148https://www.exploit-db.com/exploits/5240http://secunia.com/advisories/29288http://www.securityfocus.com/bid/28215https://exchange.xforce.ibmcloud.com/vulnerabilities/41148https://www.exploit-db.com/exploits/5240
2008-03-13
Published