CVE-2008-4620 | BDVDB-2026-32962 Detail

Description#

SQL injection vulnerability in Meeting Room Booking System (MRBS) before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to (1) month.php, and possibly (2) day.php and (3) week.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2008/2865
http://securityreason.com/securityalert/4450
https://exchange.xforce.ibmcloud.com/vulnerabilities/45972
http://www.securityfocus.com/bid/31809
https://www.exploit-db.com/exploits/6781

Exploit#

https://www.exploit-db.com/exploits/6781

History#

Version 12008-10-21Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.