Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2008-5088

Description

Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) email.php and (2) question.php, a different vector than CVE-2008-1909.

POC

Reference

- http://securityreason.com/securityalert/4599

- https://www.exploit-db.com/exploits/6510

Github

No PoCs found on GitHub currently.