CVE-2008-1404

  • Last update: Apr 13, 2023

Description

SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the kid parameter.

Software From Fixed in
exv2 / exv2 2.0.3 2.0.3.x

Details

    • Severity: Medium
  • CVE: CVE-2008-1404
  • Published: Mar 20, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10