CVE-2008-2504

EUVD-2008-2499
Multiple SQL injection vulnerabilities in Simpel Side Netbutik 1 through 4 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to netbutik.php and the (2) id parameter to product.php.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 61%
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/29333
http://www.vupen.com/english/advisories/2008/1658
https://exchange.xforce.ibmcloud.com/vulnerabilities/42572
https://www.exploit-db.com/exploits/5665
http://www.securityfocus.com/bid/29333
http://www.vupen.com/english/advisories/2008/1658
https://exchange.xforce.ibmcloud.com/vulnerabilities/42572
https://www.exploit-db.com/exploits/5665