CVEブラウザに戻る

CVE-2008-0499

HIGH

7.5

CVSS Severity Score

EPSS Score0.0550%

EPSS Percentile21.44th

Published2008年1月30日

Last Modified2026年4月23日

Vulnerability Description

SQL injection vulnerability in Mambo LaiThai 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected Platforms (CPE)

📦

Mamboxchange

Laithai

= 4.5.5

References & Advisories

🔗 http://secunia.com/advisories/28652

🔗 http://sourceforge.net/project/shownotes.php?group_id=192544&release_id=571300

🔗 http://www.securityfocus.com/bid/27483

🔗 http://www.vupen.com/english/advisories/2008/0316

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/40013

🔗 http://secunia.com/advisories/28652

🔗 http://sourceforge.net/project/shownotes.php?group_id=192544&release_id=571300

🔗 http://www.securityfocus.com/bid/27483

関連する脆弱性情報

CVE-2008-050010.0

Multiple unspecified vulnerabilities in Mambo LaiThai 4.5.5 have unknown impact and attack vectors related to (1) mod_login and (2...

CVE-2006-70927.5

SQL injection vulnerability in includes/mambo.php in Mambo LaiThai 4.5.4 SP2 and earlier allows remote attackers to execute arbitr...

CVE-2006-70935.8

Cross-site scripting (XSS) vulnerability in Mambo LaiThai 4.5.4 Security Patch 2 and earlier allows remote attackers to inject arb...

CVE-2008-665110.0

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP c...