CVE-2008-6794

SFS EZ PUB Fsf EX Pub - SQL Injection

Title source: rule
STIX 2.1

Description

SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Hakxer · textwebappsphp
https://www.exploit-db.com/exploits/6923

References (5)

Core 5
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32524
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/6923
Exploit vdb-entry x_refsource_osvdb
http://osvdb.org/49483
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/50473
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/35046

Scores

EPSS 0.0036
EPSS Percentile 57.8%

Details

CWE
CWE-89
Status published
Products (1)
sfs_ez_pub/fsf_ex_pub
Published May 07, 2009
Tracked Since Feb 18, 2026