CVE-2008-5486

TurnkeyForms Text Link Sales - SQL Injection

Title source: llm

Description

SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by ZoRLu · textwebappsphp

https://www.exploit-db.com/exploits/7124

View Code ZIP pw:eip

References (5)

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/46631

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/32308

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/7124

[Third Party Advisory] http://secunia.com/advisories/32732

[Third Party Advisory] http://securityreason.com/securityalert/4719

Scores

EPSS 0.0042

EPSS Percentile 61.6%

Classification

CWE

CWE-89

Status draft

Affected Products (1)

turnkeyforms/text_link_sales

Timeline

Published Dec 12, 2008

Tracked Since Feb 18, 2026