Unscored severity · published Feb 27, 2009
CVE-2008-6312
SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter
–
CVSS
1.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PR
Proquiz · Manzovi
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6312
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6312
Exploit
http://www.securityfocus.com/bid/32724
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/47196
www.exploit-db.com
https://www.exploit-db.com/exploits/7397
More from Proquiz
–
CVE-2008-6327
SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter, a different vector than CVE-2008-6312