CVE-2008-1496 | BDVDB-2026-29916 Detail

Description#

Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to (a) membre.php, and the (2) timestamp parameter to (b) the details action in achat/historique_commandes.php and (c) the facture action in factures/facture_html.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/41341
http://secunia.com/advisories/29466
https://www.exploit-db.com/exploits/5281
http://www.securityfocus.com/bid/28346
http://realn.free.fr/releases/70207
https://exchange.xforce.ibmcloud.com/vulnerabilities/41353

Exploit#

https://www.exploit-db.com/exploits/5281

History#

Version 12008-03-25Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.