CVE-2008-0290 | BDVDB-2026-28734 Detail

Description#

Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the selectskin parameter to an unspecified program, or (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in the gestion_membre.php page to base.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/27232
https://exchange.xforce.ibmcloud.com/vulnerabilities/39602
https://www.exploit-db.com/exploits/4887

Exploit#

https://www.exploit-db.com/exploits/4887

History#

Version 12008-01-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.