CVE-2008-4465
published 2008-10-07CVE-2008-4465: SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
PriorityP341high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
1.01%
58.6th percentile
SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xrqq-rjw2-jp5x: SQL injection vulnerability in view_mag
ghsa_unreviewed·2022-05-02·CVSS 7.5
CVE-2009-3495 [HIGH] CWE-89 GHSA-xrqq-rjw2-jp5x: SQL injection vulnerability in view_mag
SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the mag_id parameter, a different vector than CVE-2008-4465.
GHSA
GHSA-j7hv-gh42-47g6: SQL injection vulnerability in view_mags
ghsa_unreviewed·2022-05-02
CVE-2008-4465 [HIGH] CWE-89 GHSA-j7hv-gh42-47g6: SQL injection vulnerability in view_mags
SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
No detection rules found.
2008-10-07
Published