CVE-2008-3918

Ovidentia 6.6.5 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the field parameter in a search action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploits (2)

exploitdb WORKING POC

webappsphp

https://www.exploit-db.com/exploits/27771

View Code ZIP pw:eip

exploitdb WORKING POC

webappsphp

https://www.exploit-db.com/exploits/6232

View Code ZIP pw:eip

References (2)

[Vendor Advisory] http://secunia.com/advisories/31425

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/45940

Scores

EPSS 0.0025

EPSS Percentile 47.9%

Details

CWE

CWE-89

Status published

Products (1)

ovidentia/ovidentia 6.6.5

Published Sep 04, 2008

Tracked Since Feb 18, 2026