CVE-2008-3598

  • Last update: Apr 13, 2023

Description

Multiple SQL injection vulnerabilities in psipuss 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the Cid parameter to categories.php or (2) the Username parameter to login.php.

Software From Fixed in
psi-labs / psipuss 1.0 1.0.x

Details

    • Severity: High
  • CVE: CVE-2008-3598
  • Published: Aug 12, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10