CVE-2008-2916

MEDIO 6.8CVE-2008-2916 · Published 30/06/2008 · updated 16/06/2026

En resumen

CVE-2008-2916 es una vulnerabilidad MEDIO (CVSS 6.8) que afecta a pre ads portal (preprojects).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 66.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
pre ads portal preprojects	`≤ 2.0`	No fix yet

Description

Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to showcategory.php and the (2) id parameter to software-description.php.

References

e-rdc.org/v1/news.php · Exploit
secunia.com/advisories/30689 · Vendor Advisory
securityreason.com/securityalert/3963
securityfocus.com/archive/1/493371/100/0/threaded
securityfocus.com/bid/29709 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/43071
exploit-db.com/exploits/5804

Más vulnerabilidades de pre ads portal

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free