Skip to main content
← All vulnerabilities
CVE-2008-2189

SQL injection vulnerability in viewfaqs.php in AnServ Auction XL allows remote attackers to execute arbitrary SQL commands via the cat param

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

SQL injection vulnerability in viewfaqs.php in AnServ Auction XL allows remote attackers to execute arbitrary SQL commands via the cat parameter.

Timeline

  1. Public exploit on Exploit-DB

    EDB-5543

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 7

exchange.xforce.ibmcloud.com

securityfocus.com

secunia.com

securityreason.com

advisories.echo.or.id

Exploit-DB