29611Third-party advisory
http://secunia.com/advisories/29611 CVE-2008-1641
EfesTECH Video 5.0 - 'catID' SQL Injection
Record summary
CVE-2008-1641 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL commands via the catID parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBEfesTECH Video 5.0 - 'catID' SQL InjectionExploitDB exploitby RMxNot analyzed1 file
References
63791Third-party advisory
http://securityreason.com/securityalert/3791 20080329 Efestech Video v5,0 (id) Remote Sql Injectionmailing list
http://www.securityfocus.com/archive/1/490309/100/0/threaded 28532vdb entry
http://www.securityfocus.com/bid/28532 efestechvideo-default-sql-injection(41550)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/41550 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-1641