high7.5Public exploit code
CVE-2008-5270
SQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to execute arbitrary SQL commands via the board parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Yuhhu 2008 SuperStar - 'board' SQL Injection2008-06-10 · webapps · php · Verified
Impact
SQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to execute arbitrary SQL commands via the board parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wareziz | Yuhhu Superstar 2008 | Version _nil_ |