Unscored severity · published Sep 22, 2008
CVE-2008-4169
SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands via the produid parameter
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands via the produid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EA
Easyindex · Iscripts
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4169
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4169
secunia.com
http://secunia.com/advisories/31788
securityreason.com
http://securityreason.com/securityalert/4286
www.securityfocus.com
http://www.securityfocus.com/bid/31202
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/45160
www.exploit-db.com
https://www.exploit-db.com/exploits/6467