CVE-2008-1404 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 0.9% (pctl 59)
Patch early
A public exploit exists.
Description
SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the kid parameter.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 0.91% — more likely to be exploited than 59% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-03-20 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| exv2 | exv2 |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | eXV2 Module Viso 2.0.4.3 - 'kid' SQL Injection | 2008-03-14 |
References
- http://secunia.com/advisories/29389
- http://www.securityfocus.com/bid/28255
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41216
- https://www.exploit-db.com/exploits/5254
- http://secunia.com/advisories/29389
- http://www.securityfocus.com/bid/28255
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41216
- https://www.exploit-db.com/exploits/5254
→ the Explorer · watch your stack · NVD