CVE-2008-2791

Kalptaru Infotech Comparison Engine Power Script - SQL Injection

Title source: rule

Description

SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Mr.SQL · perlwebappsphp

https://www.exploit-db.com/exploits/5834

View Code ZIP pw:eip

References (4)

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/5834

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/43138

[Exploit, Vendor Advisory] http://secunia.com/advisories/30729

[Exploit] http://www.securityfocus.com/bid/29768

Scores

EPSS 0.0049

EPSS Percentile 65.4%

Details

CWE

CWE-89

Status published

Products (1)

kalptaru_infotech/comparison_engine_power_script 1.0

Published Jun 20, 2008

Tracked Since Feb 18, 2026