Unscored severity · published Apr 15, 2008
CVE-2008-1791
SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the ladderid parameter
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the ladderid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MY
Mygamingladder · Mygamingladder
through 7.0; through 7.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1791
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1791
Exploit
http://www.securityfocus.com/bid/28671
www.vupen.com
http://www.vupen.com/english/advisories/2008/1138/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41698
www.exploit-db.com
https://www.exploit-db.com/exploits/5401
More from Mygamingladder
–
CVE-2006-2002
PHP remote file inclusion vulnerability in stats.php in MyGamingLadder 7.0 allows remote attackers to execute arbitrary PHP code via a URL in the dir[base] parameter