CVE-2008-1039 - SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands via the QID parameter

HIGH

SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands via the QID parameter

Published Feb 27, 2008

7.5

HIGH

CVSS 2.0

EPSS 0.97%

SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands via the QID parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://secunia.com/advisories/29102		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/27989		vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/40839		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/5185		exploitx_refsource_EXPLOIT-DB

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Feb 27, 2008

Updated Aug 7, 2024

Reserved Feb 27, 2008

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a