CVE-2008-2205

SQL injection vulnerability in index.php in Maian Music 1.1 allows remote attackers to execute arbitrary SQL commands via the album parameter in an album action.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2008-05-14

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Maian Music (Maianscriptworld)

References

• http://secunia.com/advisories/30066
• http://securityreason.com/securityalert/3884
• http://www.securityfocus.com/archive/1/491590/100/0/threaded
• http://www.securityfocus.com/bid/29032
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42209