CVE-2008-2521 - SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authenticated users to execute arbitrary SQL commands via the fid parameter

Back Back to CVE browser

MEDIUM

SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authenticated users to execute arbitrary SQL commands via the fid parameter

Published Jun 3, 2008

6.5

MEDIUM

CVSS 2.0

EPSS 0.90%

Description

SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authenticated users to execute arbitrary SQL commands via the fid parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (5)

http://secunia.com/advisories/30210
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/29167
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-2516
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42355
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/5598
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/30210		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/29167		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-2516		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42355		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/5598		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 3, 2008

Updated Aug 7, 2024

Reserved Jun 3, 2008

Link CVE-2008-2521

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-2521

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jun 3, 2008

Updated Aug 7, 2024

Link EUVD-2008-2516

GitHub

No data