CVE-2008-4055

2008-09-1114:00:00

mitre

www.cve.org

sql injection

tops_top.php

million pixel ad script

remote attackers

arbitrary sql commands

id_cat parameter

AI Score

8.4

Confidence

Low

EPSS

0.001

Percentile

44.3%

JSON

SQL injection vulnerability in tops_top.php in Million Pixel Ad Script (Million Pixel Script) allows remote attackers to execute arbitrary SQL commands via the id_cat parameter.

References

packetstorm.linuxsecurity.com/0808-exploits/millionpixel-sql.txt

secunia.com/advisories/31626