CVE-2008-5817 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 1.1% (pctl 65)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in index.php in Web Scribble Solutions webClassifieds 2005 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) password fields in a sign_in action.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 1.13% — more likely to be exploited than 65% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2009-01-02 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| web scribble solutions | webclassifieds |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | webClassifieds 2005 - Authentication Bypass | 2008-12-29 |
References
- http://secunia.com/advisories/33337
- http://securityreason.com/securityalert/4860
- http://www.securityfocus.com/bid/33028
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47629
- https://www.exploit-db.com/exploits/7602
- http://secunia.com/advisories/33337
- http://securityreason.com/securityalert/4860
- http://www.securityfocus.com/bid/33028
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47629
- https://www.exploit-db.com/exploits/7602
→ the Explorer · watch your stack · NVD