CVE-2008-1494
Easy-Clanpage 2.2 - SQL Injection via id Parameter in User Details Action
Title source: llmDescription
SQL injection vulnerability in inc/module/online.php in Easy-Clanpage 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a user details action, a different vector than CVE-2008-1425.
References (3)
Core 3
Core References
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/28329
Exploit third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/3773
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/489888/100/0/threaded
Scores
EPSS
0.0112
EPSS Percentile
63.1%
Details
CWE
CWE-89
Status
published
Products (1)
easy-clanpage/easy-clanpage
2.2
Published
Mar 25, 2008
Tracked Since
Feb 18, 2026