Beveiligingsadvies

CVE-2008-4157

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2008-09-22 16:20:00
Laatst bijgewerkt 2024-08-07 10:08:34
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected.