CVE-2008-6477

Mumbojumbo Op4 - SQL Injection

Title source: rule

Description

SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Lidloses_Auge · phpwebappsphp
https://www.exploit-db.com/exploits/5440

Scores

EPSS 0.0038
EPSS Percentile 59.3%

Details

CWE
CWE-89
Status published
Products (1)
mumbojumbo/op4
Published Mar 16, 2009
Tracked Since Feb 18, 2026