high7.5
CVE-2008-3393
SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute arbitrary SQL commands via the events_id parameter.
Impact
SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute arbitrary SQL commands via the events_id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infomining | Bookmine | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://holisticinfosec.org/content/view/79/45/
- http://secunia.com/advisories/31258
- http://www.osvdb.org/47202
- http://www.securityfocus.com/bid/30432
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44067
- http://holisticinfosec.org/content/view/79/45/
- http://secunia.com/advisories/31258
- http://www.osvdb.org/47202
- http://www.securityfocus.com/bid/30432
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44067