PT-2008-2315 · Bookmarkx · Bookmarkx Script
S@Bun
·
Published
2008-02-12
·
Updated
2017-09-29
·
CVE-2008-0695
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
BookmarkX script 2007
Description
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the
topicid parameter in a "showtopic" action within the index.php file.Recommendations
For BookmarkX script 2007, consider restricting access to the
topicid parameter in the "showtopic" action to minimize the risk of exploitation. As a temporary workaround, avoid using the topicid parameter in the affected index.php file until the issue is resolved.Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Bookmarkx Script