CVE-2008-1957

2008-04-2514:00:00

mitre

www.cve.org

AI Score

8.4

Confidence

Low

EPSS

0.003

Percentile

70.0%

JSON

SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands via the nb parameter in voir mode.

References

secunia.com/advisories/29814

www.securityfocus.com/bid/28876

www.vupen.com/english/advisories/2008/1319/references

exchange.xforce.ibmcloud.com/vulnerabilities/41946

www.exploit-db.com/exploits/5483