CVE-2008-2968

  • Last update: Apr 13, 2023

Description

SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the book_id parameter.

Software From Fixed in
yektaweb / academic_web_tools - 1.4.2.8.x
yektaweb / academic_web_tools - 1.4.3.1.x

Details

    • Severity: High
  • CVE: CVE-2008-2968
  • Published: Jul 2, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10