high7.5Public exploit code
CVE-2008-5088
Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID pa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHPKB 1.5 Professional - Multiple SQL Injections2008-09-21 · webapps · php · Verified
- PHPKB Knowledge Base Software 2.0 - Multilanguage Support Multiple SQL Injections2010-05-10 · webapps · php
Impact
Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) email.php and (2) question.php, a different vector than CVE-2008-1909.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Knowledgebase-Script | Phpkb Knowledge Base Software | Version 1.5 |