CVE-2008-5805

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the siteid parameter, a different vector than CVE-2006-5828.

Published: Dec 31, 2008
Updated: Apr 13, 2023
CVE: CVE-2008-5805
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
deltascripts / php_classifieds	7.3	7.3.x
deltascripts / php_classifieds	6.0.5	6.0.5.x
deltascripts / php_classifieds	7.0	7.0.x
deltascripts / php_classifieds	7.2	7.2.x
deltascripts / php_classifieds	6.18	6.18.x
deltascripts / php_classifieds	7.1	7.1.x
deltascripts / php_classifieds	-	7.5.x
deltascripts / php_classifieds	6.19	6.19.x
deltascripts / php_classifieds	6.20	6.20.x
deltascripts / php_classifieds	6.04	6.04.x

http://www.securityfocus.com/bid/32161
http://www.securityfocus.com/bid/32191
http://www.vupen.com/english/advisories/2008/3079
https://exchange.xforce.ibmcloud.com/vulnerabilities/46428
https://www.exploit-db.com/exploits/7047

Vulnerability Database

290,020

CVE-2008-5805