CVE-2008-0469 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 1.2% (pctl 68)
Patch early
A public exploit exists.
Description
SQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newscat action.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.24% — more likely to be exploited than 68% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-01-29 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| tiger php news system | tiger php news system |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Tiger PHP News System 1.0b build 39 - SQL Injection | 2008-01-25 |
References
- http://secunia.com/advisories/28641
- http://securityreason.com/securityalert/3587
- http://www.securityfocus.com/archive/1/486961/100/0/threaded
- http://www.securityfocus.com/bid/27445
- http://www.vupen.com/english/advisories/2008/0312
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39908
- https://www.exploit-db.com/exploits/4984
- http://secunia.com/advisories/28641
- http://securityreason.com/securityalert/3587
- http://www.securityfocus.com/archive/1/486961/100/0/threaded
- http://www.securityfocus.com/bid/27445
- http://www.vupen.com/english/advisories/2008/0312
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39908
- https://www.exploit-db.com/exploits/4984
→ the Explorer · watch your stack · NVD