CVE-2008-0363

Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to postcomment.php and the (2) album parameter to gallery.php.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2008-01-18

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Clever Copy (Clever Copy)

References

• http://secunia.com/advisories/28560
• http://securityreason.com/securityalert/3553
• http://www.securityfocus.com/archive/1/486492/100/0/threaded
• http://www.securityfocus.com/bid/27335
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39746