CVE-2008-3556

HIGH 7.5CVE-2008-3556 · Published 08/08/2008 · updated 16/06/2026

In short

CVE-2008-3556 is a HIGH (CVSS 7.5) vulnerability affecting battlenet clan script (haudenschilt).
Chance of exploitation in the next 30 days (EPSS): 0.97%, higher than 61.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
battlenet clan script haudenschilt	`= 1.5.2`	No fix yet

Description

Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) showmember parameter in a members action and the (2) thread parameter in a board action. NOTE: vector 1 might be the same as CVE-2008-2522.

References

securityreason.com/securityalert/4119
securityfocus.com/archive/1/495167/100/0/threaded
securityfocus.com/bid/30565 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/44262

More vulnerabilities in battlenet clan script

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free