CVE-2008-1957

  • Last update: Apr 13, 2023

Description

SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands via the nb parameter in voir mode.

Software From Fixed in
easyscripts / tr_script_news 2.1 2.1.x

Details

    • Severity: High
  • CVE: CVE-2008-1957
  • Published: Apr 25, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10