CVE-2008-0649

ADP Astanda Directory Project - SQL Injection

Title source: rule
STIX 2.1

Description

SQL injection vulnerability in detail.php in Astanda Directory Project (ADP) 1.2 and 1.3 allows remote attackers to execute arbitrary SQL commands via the link_id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by you_kn0w · textwebappsphp
https://www.exploit-db.com/exploits/5071

References (2)

Core 2
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/5071
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27646

Scores

EPSS 0.0040
EPSS Percentile 61.0%

Details

CWE
CWE-89
Status published
Products (2)
adp/astanda_directory_project 1.2
adp/astanda_directory_project 1.3
Published Feb 07, 2008
Tracked Since Feb 18, 2026