CVE-2008-0921 - SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter

HIGH

SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter

Published Feb 22, 2008

7.5

HIGH

CVSS 2.0

EPSS 0.97%

SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://secunia.com/advisories/29061		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/27928		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-0928		Advisory
https://www.exploit-db.com/exploits/5170		exploitx_refsource_EXPLOIT-DB