CVE-2008-7085

EUVD-2008-7044
Multiple SQL injection vulnerabilities in TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the viewpage action to the default URI, probably index.php, or (2) divid parameter in the schedule action to index.php.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
Affected Products (NVD)
VendorProductVersion
thehockeystophockeystats_online
2.0
thehockeystophockeystats_online
2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/30248
https://exchange.xforce.ibmcloud.com/vulnerabilities/43852
https://www.exploit-db.com/exploits/6084
http://www.securityfocus.com/bid/30248
https://exchange.xforce.ibmcloud.com/vulnerabilities/43852
https://www.exploit-db.com/exploits/6084