CVE-2008-7075 Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd.
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2008-7075?
CVE-2008-7075 is a high-severity vulnerability in n/a, published on 25 Aug 2009.
Official description
Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbitrary SQL commands via (1) the subcatid parameter to article.list.php; or the artid parameter to (2) article.print.php, (3) article.comments.php, (4) article.publisher.php, or (5) article.download.php; and (6) the PATH_INFO to article.download.php. NOTE: some of these details are obtained from third party information.
Weakness: CWE-89
Which versions are affected by CVE-2008-7075?
It affects 1 product.
Products include Kalptaru Infotech Stararticles.
How do I fix CVE-2008-7075?
No fix has been published for CVE-2008-7075 yet. Limit exposure of the affected software until one is available.
Is CVE-2008-7075 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2008-7075 exists.
Public exploit code: 2 Exploit-DB entries.
Other vulnerabilities in n/a
Sources
Also known as GHSA-f39v-mvgv-mqg2.