CVE-2008-5088

PHPKB Knowledge Base Software 1.5 Professional - SQL Injection via ID Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2008-5088. PoCs published by d3v1l, R3d-D3V!L.

AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in PHPKB Knowledge Base Software v1.5 Professional. It provides proof-of-concept URLs to extract database information, including version, user credentials, and other sensitive data.

Description

Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) email.php and (2) question.php, a different vector than CVE-2008-1909.

Exploits (2)

exploitdb WORKING POC VERIFIED
by d3v1l · textwebappsphp
https://www.exploit-db.com/exploits/6510

This exploit demonstrates SQL injection vulnerabilities in PHPKB Knowledge Base Software v1.5 Professional. It provides proof-of-concept URLs to extract database information, including version, user credentials, and other sensitive data.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: PHPKB Knowledge Base Software v1.5 Professional
No auth needed
Prerequisites: Access to the vulnerable email.php or question.php endpoints
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC
by R3d-D3V!L · textwebappsphp
https://www.exploit-db.com/exploits/12561

This exploit demonstrates SQL injection vulnerabilities in PHPKB Knowledge Base Software v2. It provides two distinct SQLi payloads targeting the 'email.php' and 'comment.php' endpoints to extract database information such as version, user, and database name.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: PHPKB Knowledge Base Software v2 Multilanguage Support
No auth needed
Prerequisites: Access to the vulnerable endpoints 'email.php' and 'comment.php'
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/4599
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/31279
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/6510

Scores

EPSS 0.0098
EPSS Percentile 57.7%

Details

CWE
CWE-89
Status published
Products (1)
knowledgebase-script/phpkb_knowledge_base_software 1.5 _nil_
Published Nov 14, 2008
Tracked Since Feb 18, 2026