CVE-2008-2652

Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow remote attackers to execute arbitrary SQL commands via the (1) idp and (2)…

published June 10, 2008

CVSS
—
EPSS
1%
Percentile
63.7
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow remote attackers to execute arbitrary SQL commands via the (1) idp and (2) category parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01042 · 63.7th percentile
Published
2008-06-10T18:00Z
EPSS history
Timeline
  • 10 JUN 18:00Z
    Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow remote attackers to execute arbitrary SQL commands via the (1) idp and (2)…
    cvelistv5