Unscored severity · published Sep 5, 2008
CVE-2008-3942
SQL injection vulnerability in landsee.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL commands via the id parameter
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in landsee.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FP
Full Php Emlak Script · Ozsari
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3942
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3942
Exploit
http://packetstormsecurity.org/0808-exploits/phpemlak-sql.txt
www.securityfocus.com
http://www.securityfocus.com/bid/30962
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/44887
More from Full Php Emlak Script
–
CVE-2008-6133
SQL injection vulnerability in arsaprint.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than…