CVE-2008-4169

CVSS 7.5 - HIGH

Description

SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands via the produid parameter.

Affected Products

Vendor	Product	Version
iscripts	easyindex	`All versions`

References

http://secunia.com/advisories/31788

http://securityreason.com/securityalert/4286

http://www.securityfocus.com/bid/31202

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

https://www.exploit-db.com/exploits/6467

http://secunia.com/advisories/31788

http://securityreason.com/securityalert/4286

http://www.securityfocus.com/bid/31202

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

https://www.exploit-db.com/exploits/6467

Weakness Types

CWE-89

CVE Information

CVE ID:: CVE-2008-4169
Published:: 2008-09-22
Modified:: 2026-04-23
CVSS Score:: 7.5
Severity:: HIGH
Vector:: AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Vendors

iscripts

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL