high7.5Public exploit code
CVE-2008-3888
SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a membe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MiniNuke 2.1 - 'uid' SQL Injection2008-02-25 · webapps · asp · Verified
Impact
SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a member_details action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aspindir | Mini Nuke Freehost | Version 2.3 |