Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2008-7075
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-7075

Description:
Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbitrary SQL commands via (1) the subcatid parameter to article.list.php; or the artid parameter to (2) article.print.php, (3) article.comments.php, (4) article.publisher.php, or (5) article.download.php; and (6) the PATH_INFO to article.download.php. NOTE: some of these details are obtained from third party information.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/46981

SAID
  Secunia Advisory: SA32887

OSVDB
  50452
  50453
  50454
  50455
  50456

MILW0RM
  http://www.milw0rm.com/exploits/7240
  http://www.milw0rm.com/exploits/7243

BID
  32489


Return to the previous page.