CVE-2008-5778

Free Links Directory Script 1.2a - SQL Injection

Title source: llm

Description

SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands via the linkid parameter.

Exploits (2)

exploitdb WORKING POC VERIFIED

by ka0x · perlwebappsphp

https://www.exploit-db.com/exploits/7489

View Code ZIP pw:eip

exploitdb WORKING POC

webappsphp

https://www.exploit-db.com/exploits/7453

View Code ZIP pw:eip

References (6)

[Vendor Advisory] http://secunia.com/advisories/33075

[Exploit] http://www.securityfocus.com/bid/32859

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/47377

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/7489

[Third Party Advisory, VDB Entry] http://osvdb.org/50724

[Third Party Advisory] http://securityreason.com/securityalert/4852

Scores

EPSS 0.0167

EPSS Percentile 82.2%

Details

CWE

CWE-89

Status published

Products (1)

flds_script/flds 1.2a

Published Dec 30, 2008

Tracked Since Feb 18, 2026