CVE-2008-3861
Published Aug 29, 2008
Last updated 7 years ago
Overview
- Description
- Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in pages.php and (2) the price_max parameter in search.php.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-89
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:phpmyrealty:phpmyrealty:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33F443ED-98AE-4797-BF90-4E09FF8092D2",
"versionEndIncluding": "1.0.9"
},
{
"criteria": "cpe:2.3:a:phpmyrealty:phpmyrealty:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81C2FACA-F6E6-4AEF-BC2D-B16CF6F60EE1"
},
{
"criteria": "cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37A490C4-185B-4954-A7E5-21D082F6AC3F"
},
{
"criteria": "cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB874515-6546-468B-88E3-DA57C70FC938"
},
{
"criteria": "cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D564CC31-EBFA-4DFD-B018-2E31791537FD"
},
{
"criteria": "cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59F87076-8696-464A-BD69-E31C77C145EE"
},
{
"criteria": "cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B1BA29C-6AC2-4494-B015-E0FBC4CC72D0"
},
{
"criteria": "cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "834819B6-A9EB-492F-985E-277C2F08745A"
},
{
"criteria": "cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71305164-FDAE-4AB9-8905-1A36C77A2A64"
},
{
"criteria": "cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC9C5DA2-08E4-4DD7-8FA7-4D6F79322463"
}
],
"operator": "OR"
}
]
}
]