CVE-2008-3506

PolyPager <1.0 rc2 - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to execute arbitrary SQL commands via the nr parameter to the default URI.

Exploits (1)

exploitdb WORKING POC VERIFIED
by CWH Underground · textwebappsphp
https://www.exploit-db.com/exploits/5941

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/43371
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/4116
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/29972
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/5941

Scores

EPSS 0.0041
EPSS Percentile 61.6%

Details

CWE
CWE-89
Status published
Products (8)
polypager/polypager 0.9.4
polypager/polypager 0.9.6
polypager/polypager 0.9.7
polypager/polypager 0.9.8
polypager/polypager 0.9.9
polypager/polypager 0.9.51
polypager/polypager 1.0 (2 CPE variants)
polypager/polypager < 1.0
Published Aug 06, 2008
Tracked Since Feb 18, 2026