CVE-2008-0157

Flexbb < 0.6.3 - SQL Injection

Title source: rule

Description

SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_temp_id parameter in a cookie.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Eugene Minaev · perlwebappsphp
https://www.exploit-db.com/exploits/4858

Scores

EPSS 0.0046
EPSS Percentile 64.3%

Details

CWE
CWE-89
Status published
Products (2)
flexbb/flexbb 1.0_10005_beta_release_1
flexbb/flexbb < 0.6.3
Published Jan 09, 2008
Tracked Since Feb 18, 2026