CVE-2008-5778

Free Links Directory Script 1.2a - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2008-5778. PoCs published by ka0x.

AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in Free Links Directory Script V1.2a via the 'linkid' parameter in report.php. It extracts user credentials by injecting a UNION-based SQL query.

Description

SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands via the linkid parameter.

Exploits (2)

exploitdb WORKING POC VERIFIED
by ka0x · perlwebappsphp
https://www.exploit-db.com/exploits/7489

This exploit targets a SQL injection vulnerability in Free Links Directory Script V1.2a via the 'linkid' parameter in report.php. It extracts user credentials by injecting a UNION-based SQL query.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Free Links Directory Script V1.2a
No auth needed
Prerequisites: Target must be running Free Links Directory Script V1.2a · report.php must be accessible
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC
webappsphp
https://www.exploit-db.com/exploits/7453

This exploit demonstrates a SQL injection vulnerability in Free Links Directory Script via the 'id' parameter in redir.php. The PoC shows how to extract database version information using a UNION-based SQLi attack.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Free Links Directory Script
No auth needed
Prerequisites: Target must be running Free Links Directory Script with vulnerable redir.php endpoint
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (6)

Core 6
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/33075
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/7489
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/47377
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/4852
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/50724
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/32859

Scores

EPSS 0.0118
EPSS Percentile 63.7%

Details

CWE
CWE-89
Status published
Products (1)
flds_script/flds 1.2a
Published Dec 30, 2008
Tracked Since Feb 18, 2026