CVE-2008-4355

HIGH 7.5CVE-2008-4355 · Published 30/09/2008 · updated 16/06/2026

In short

CVE-2008-4355 is a HIGH (CVSS 7.5) vulnerability affecting pforum (powie).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 64.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pforum powie	`= 1.30`	No fix yet

Description

SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

References

secunia.com/advisories/31872 · Vendor Advisory
securityfocus.com/bid/31150
vupen.com/english/advisories/2008/2559
exchange.xforce.ibmcloud.com/vulnerabilities/45079
exploit-db.com/exploits/6442

More vulnerabilities in pforum

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free