CVE-2008-1957

Tr Script News 2.1 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands via the nb parameter in voir mode.

Exploits (1)

exploitdb WORKING POC VERIFIED

by His0k4 · textwebappsphp

https://www.exploit-db.com/exploits/5483

View Code ZIP pw:eip

References (5)

[Vendor Advisory] http://secunia.com/advisories/29814

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/41946

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/28876

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/5483

[Third Party Advisory] http://www.vupen.com/english/advisories/2008/1319/references

Scores

EPSS 0.0072

EPSS Percentile 72.1%

Classification

CWE

CWE-89

Status draft

Affected Products (1)

easyscripts/tr_script_news

Timeline

Published Apr 25, 2008

Tracked Since Feb 18, 2026