Unscored severity · published Jan 15, 2008
CVE-2008-0255
SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the section parameter
–
CVSS
2%
EPSS
No
On KEV
Description
SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the section parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IC
Igaming Cms · Igamingcms
through 1.3.1; 1.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0255
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0255
Vendor Advisory
http://secunia.com/advisories/28426
Exploit
http://www.securityfocus.com/bid/27230
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/39598
www.exploit-db.com
https://www.exploit-db.com/exploits/4886
More from Igaming Cms
–
CVE-2008-5841
Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to (1) previews.php and (2)…