CVE-2008-3491

ALTO 7.5CVE-2008-3491 · Published 06/08/2008 · updated 16/06/2026

In breve

CVE-2008-3491 è una vulnerabilità ALTO (CVSS 7.5) che riguarda ipost (scripts24), itgp (scripts24).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.0%, superiore al 81.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
ipost scripts24	`= 1.0.1`	No fix yet
itgp scripts24	`= 1.0.4`	No fix yet

Description

SQL injection vulnerability in go.php in Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a report action.

References

osvdb.org/47333
secunia.com/advisories/31344
secunia.com/advisories/31345
securityreason.com/securityalert/4117
securityfocus.com/bid/30504 · Exploit
securityfocus.com/bid/30505 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/44175
exchange.xforce.ibmcloud.com/vulnerabilities/44176
exploit-db.com/exploits/6185
exploit-db.com/exploits/6186

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free