CVE-2008-1726 | BDVDB-2026-30168 Detail

Description#

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kqid parameter to (a) articletext.php and (b) articletextonly.php and the (2) username parameter to (c) logincheck.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/28713
http://www.osvdb.org/44256
http://www.osvdb.org/44255
https://www.exploit-db.com/exploits/5421
http://www.securityfocus.com/bid/28716
http://secunia.com/advisories/29716
http://www.osvdb.org/44254
https://exchange.xforce.ibmcloud.com/vulnerabilities/41746

Exploit#

https://www.exploit-db.com/exploits/5421

History#

Version 12008-04-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.