CVE-2008-5337

Bandwebsite 1.5 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in lyrics.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by ZoRLu · textwebappsphp

https://www.exploit-db.com/exploits/7215

View Code ZIP pw:eip

References (5)

[Exploit] http://z0rlu.blogspot.com/2008/11/bandwebsite-15-sqlxss-multiple-remote.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/32453

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/7215

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/46816

[Third Party Advisory] http://securityreason.com/securityalert/4689

Scores

EPSS 0.0044

EPSS Percentile 62.6%

Classification

CWE

CWE-89

Status draft

Affected Products (2)

multimania/bandsite_portal_system

multimania/bandwebsite

Timeline

Published Dec 05, 2008

Tracked Since Feb 18, 2026