30210Third-party advisory
http://secunia.com/advisories/30210 CVE-2008-2521
Mega File Hosting Script 1.2 - 'fid' SQL Injection
Record summary
CVE-2008-2521 has a selected CVSS score of 6.5; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authenticated users to execute arbitrary SQL commands via the fid parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMega File Hosting Script 1.2 - 'fid' SQL InjectionExploitDB exploitby TurkishWarriorrNot analyzed1 file
References
529167vdb entry
http://www.securityfocus.com/bid/29167 megafile-members-sql-injection(42355)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/42355 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-2521 5598exploit
https://www.exploit-db.com/exploits/5598