PT-2008-3465 · W1L3D4+1 · Philboard

U238 · Published 2008-04-24 · Updated 2017-09-29 · CVE-2008-1939

Mitre

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) topic parameters to (a) philboard reply.asp, and the (3) forumid parameter to (b) philboard newtopic.asp, different vectors than CVE-2007-2641 and CVE-2007-0920.

Exploit

Fix

RCE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2008-1939

Affected Products

Philboard

References · 6

• 🔥 https://exploit-db.com/exploits/5475 · Exploit
• 🔥 http://securityfocus.com/bid/28871 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1939 · Security Note
• http://vupen.com/english/advisories/2008/1340/references · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1939 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41957 · Note