Unscored severity · published Sep 30, 2008
CVE-2008-4354
SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IB
Iboutique · Net Art Media
4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4354
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4354
secunia.com
http://secunia.com/advisories/31871
Exploit
http://www.securityfocus.com/bid/31159
www.vupen.com
http://www.vupen.com/english/advisories/2008/2561
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/45110
www.exploit-db.com
https://www.exploit-db.com/exploits/6444