CVE-2008-7085 | BDVDB-2026-38110 Detail

Description#

Multiple SQL injection vulnerabilities in TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the viewpage action to the default URI, probably index.php, or (2) divid parameter in the schedule action to index.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/43852
https://www.exploit-db.com/exploits/6084
http://www.securityfocus.com/bid/30248

Exploit#

https://www.exploit-db.com/exploits/6084

History#

Version 12009-08-26Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.