CVE-2008-3251

HOCH 7.5CVE-2008-3251 · Published 21/07/2008 · updated 16/06/2026

Kurz gesagt

CVE-2008-3251 ist eine Schwachstelle (HOCH (CVSS 7.5)) in tplsoccersite (tpl design).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.4%, höher als bei 84.3% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
tplsoccersite tpl_design	`= 1.0`	No fix yet

Description

Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the opp parameter to tampereunited/opponent.php; or the id parameter to (2) index.php, (3) player.php, (4) matchdetails.php, or (5) additionalpage.php in tampereunited/.

References

secunia.com/advisories/31111 · Vendor Advisory
securityreason.com/securityalert/4018
tpl-design.com/index.php · Patch
securityfocus.com/bid/30260 · Patch
vupen.com/english/advisories/2008/2121/references
exchange.xforce.ibmcloud.com/vulnerabilities/43849
exploit-db.com/exploits/6088

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free