CVE-2008-2529

  • Last update: Apr 13, 2023

Description

SQL injection vulnerability in read.php in Advanced Links Management (ALM) 1.5.2 allows remote attackers to execute arbitrary SQL commands via the catId parameter.

Software From Fixed in
advanced_links_management / advanced_links_management 1.5.2 1.5.2.x

Details

    • Severity: High
  • CVE: CVE-2008-2529
  • Published: Jun 3, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10