CVE-2008-0397 | BDVDB-2026-28842 Detail

Description#

Multiple SQL injection vulnerabilities in aflog 1.01, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to comments.php and (2) an unspecified parameter to view.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2008/0255
http://secunia.com/advisories/28594
https://www.exploit-db.com/exploits/4958
https://exchange.xforce.ibmcloud.com/vulnerabilities/39825
http://www.securityfocus.com/bid/27398

Exploit#

https://www.exploit-db.com/exploits/4958

History#

Version 12008-01-23Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.