CVE-2008-3762
- State
- Published
- Severity
- Not scored
- Published
- Aug 21, 2008
- Updated
- Aug 7, 2024
- Reserved
- Aug 21, 2008
Description
SQL injection vulnerability in onlinestatus_html.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the dep parameter, related to lack of input sanitization in the get function in global.php.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- phplivehelper-dep-sql-injection(44568)vdb-entry
- 6261exploit
- 4178third-party-advisory
- 20080816 PHP Live Helper <= 2.0.1 Multiple Vulnerabilitiesmailing-list
- 30729vdb-entry
- 31521third-party-advisory
- http://www.gulftech.org/?node=research&article_id=00124-08162008
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.