CVE-2008-2087 in Web Hosting Directory Scriptinfo

Summary

SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the host_id parameter, a different vector than CVE-2005-3817.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

05/06/2008

Disclosure

05/06/2008

Entries

1

CPE

ready

Exploit

Download

CVSS

7.3

EPSS

0.01020

Sources

Want to know what is going to be exploited?

We predict KEV entries!