CVE-2008-6867

Scripts FOR Sites EZ Career - SQL Injection

Title source: rule

Description

SQL injection vulnerability in content.php in Scripts For Sites (SFS) EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Stack · textwebappsphp

https://www.exploit-db.com/exploits/6919

View Code ZIP pw:eip

References (5)

[Vendor Advisory] http://secunia.com/advisories/32527

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/32037

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/6919

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/46275

[Third Party Advisory, VDB Entry] http://osvdb.org/49486

Scores

EPSS 0.0034

EPSS Percentile 56.6%

Classification

CWE

CWE-89

Status draft

Affected Products (1)

scripts_for_sites/ez_career

Timeline

Published Jul 14, 2009

Tracked Since Feb 18, 2026