CVE-2008-1316

EUVD-2008-1323
SQL injection vulnerability in qtf_ind_search_ov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
Affected Products (NVD)
VendorProductVersion
qt-cutequicktalk_forum
𝑥
≤ 1.6
qt-cutequicktalk_forum
1.3
qt-cutequicktalk_forum
1.4
qt-cutequicktalk_forum
1.5.0.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/29288
http://www.securityfocus.com/bid/28215
https://exchange.xforce.ibmcloud.com/vulnerabilities/41148
https://www.exploit-db.com/exploits/5240
http://secunia.com/advisories/29288
http://www.securityfocus.com/bid/28215
https://exchange.xforce.ibmcloud.com/vulnerabilities/41148
https://www.exploit-db.com/exploits/5240