CVE-2008-6777

Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a…

published May 1, 2009

CVSS
—
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a confirm action, the (2) user parameter in a newconfirm action, and (3) reqpwd action to member.php; and the (4) quote parameter in a post action and (5) pid parameter in an edit action to post.php, different vectors than CVE-2005-0413.2 and CVE-2007-6667.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00884 · 58.8th percentile
Published
2009-05-01T17:00Z
EPSS history
Timeline
  • 01 MAY 17:00Z
    Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a…
    cvelistv5