CVE-2008-4175
MEDIUM 6.5EPSS 1.1%
Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php.
- CVSS v2.0 NVD
- 6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P - EPSS
- 1.06% chance of exploitation in the next 30 days, 64th percentile
- Published
- 2008-09-23
- Updated
- 2024-08-07