Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Niiub

#37534of 53,630
7.5Total CVSS
Vulnerabilities · 1
PT-2008-3921
7.5
2008-05-27
Comicshout · Comicshout · CVE-2008-2456
Name of the Vulnerable Software and Affected Versions: ComicShout versions 2.5 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `comic id` parameter in the "index.php" endpoint. Recommendations: For ComicShout versions 2.5 and earlier, update to a version later than 2.5 to resolve the issue. As a temporary workaround, consider restricting access to the `comic id` parameter in the "index.php" endpoint until a patch is available.