Unscored severity · published Jan 23, 2008
CVE-2008-0429
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a…
–
CVSS
1.2%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forum_catview action.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FP
Forum Pay Per Post Exchange · Alstrasoft
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0429
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0429
Vendor Advisory
http://secunia.com/advisories/28581
Exploit
http://www.securityfocus.com/bid/27381
www.vupen.com
http://www.vupen.com/english/advisories/2008/0231
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/39820
www.exploit-db.com
https://www.exploit-db.com/exploits/4956
www.exploit-db.com
https://www.exploit-db.com/exploits/6401
More from Forum Pay Per Post Exchange
–
CVE-2008-3954
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat…
–
CVE-2008-0440
AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts