CVE-2008-0363

2008-01-1821:00:00

mitre

www.cve.org

8.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.7%

JSON

Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to postcomment.php and the (2) album parameter to gallery.php.

References

secunia.com/advisories/28560

securityreason.com/securityalert/3553

www.securityfocus.com/archive/1/486492/100/0/threaded

www.securityfocus.com/bid/27335

exchange.xforce.ibmcloud.com/vulnerabilities/39746