Unscored severity · published Oct 27, 2008
CVE-2008-4743
SQL injection vulnerability in index.php in QuidaScript FAQ Management Script allows remote attackers to execute arbitrary SQL commands via the catid parameter
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in QuidaScript FAQ Management Script allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FM
Faq Management Script · Quidascript
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4743
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4743
secunia.com
http://secunia.com/advisories/32052
Exploit
http://www.packetstormsecurity.org/0808-exploits/faqman-sql.txt
Exploit
http://www.securityfocus.com/bid/30775
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/44583