CVE-2008-4431
Published Oct 3, 2008
Last updated 7 years ago
Overview
- Description
- SQL injection vulnerability in index.php in IceBB 1.0-rc9.3 and earlier allows remote attackers to execute arbitrary SQL commands via the skin parameter, probably related to an incorrect protection mechanism in the clean_string function in includes/functions.php.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-89
Evaluator
- Comment
- -
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:icebb:icebb:*:rc9.3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "240243FE-CBF7-4F35-BE6C-20E6A5E09FAD",
"versionEndIncluding": "1.0"
},
{
"criteria": "cpe:2.3:a:icebb:icebb:0.9:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6269527-51CA-4C5D-8F69-1EB101C21E0B"
},
{
"criteria": "cpe:2.3:a:icebb:icebb:0.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81476F79-F1F7-4742-A7A9-B9361C35A907"
},
{
"criteria": "cpe:2.3:a:icebb:icebb:0.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FAF79EE-168B-479F-8669-E82B287C2F9C"
},
{
"criteria": "cpe:2.3:a:icebb:icebb:0.9.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8F54313-89B8-4951-9489-EB2453469791"
},
{
"criteria": "cpe:2.3:a:icebb:icebb:0.9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9CBAAF6-C37D-4588-830E-9BE3D28A2CFB"
},
{
"criteria": "cpe:2.3:a:icebb:icebb:0.9.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "635FF1C8-7200-4E41-AE56-E4002BE6AD0F"
},
{
"criteria": "cpe:2.3:a:icebb:icebb:1.0:rc5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF46073D-8F88-41A5-9DAF-F5529B033AF2"
},
{
"criteria": "cpe:2.3:a:icebb:icebb:1.0:rc5.1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59BDB5CB-FF29-4BA5-99FB-BE05209D270A"
},
{
"criteria": "cpe:2.3:a:icebb:icebb:1.0:rc6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "223FD946-0533-41A4-9890-1827EE93A4A6"
},
{
"criteria": "cpe:2.3:a:icebb:icebb:1.0:rc7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96561A8A-DB28-4721-801E-04CC73EAC324"
},
{
"criteria": "cpe:2.3:a:icebb:icebb:1.0:rc8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2C050D3-3EE1-4254-83F8-6BAC9337F118"
},
{
"criteria": "cpe:2.3:a:icebb:icebb:1.0:rc9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5AD317C8-7A2E-445D-BB30-B43CEECB1709"
},
{
"criteria": "cpe:2.3:a:icebb:icebb:1.0:rc9.1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1767BB4C-703C-455E-B8DD-8F2A8DB180C3"
},
{
"criteria": "cpe:2.3:a:icebb:icebb:1.0:rc9.2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A7AC70F-169F-4B91-8390-812E64AD3603"
}
],
"operator": "OR"
}
]
}
]