{"id":"CVE-2008-4175","state":"PUBLISHED","title":"Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id para","description":"Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php.","publishedAt":"2008-09-23T15:00:00.000Z","updatedAt":"2024-08-07T10:08:34.914Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://exchange.xforce.ibmcloud.com/vulnerabilities/45153","https://exchange.xforce.ibmcloud.com/vulnerabilities/45155","https://www.exploit-db.com/exploits/6466","http://secunia.com/advisories/31853","http://www.securityfocus.com/bid/31191","http://securityreason.com/securityalert/4299"],"weaknesses":[],"ingestedAt":"2026-10-29T19:39:00.625Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2008/4xxx/CVE-2008-4175.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2008-4175","state":"PUBLISHED","datePublished":"2008-09-23T15:00:00.000Z","dateUpdated":"2024-08-07T10:08:34.914Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2008-09-23T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45153","name":"linkbidscript-upgrade-sql-injection(45153)","tags":["vdb-entry","x_refsource_XF"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45155","name":"linkbidscript-edit-sql-injection(45155)","tags":["vdb-entry","x_refsource_XF"]},{"url":"https://www.exploit-db.com/exploits/6466","name":"6466","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://secunia.com/advisories/31853","name":"31853","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/bid/31191","name":"31191","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://securityreason.com/securityalert/4299","name":"4299","tags":["third-party-advisory","x_refsource_SREASON"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2017-09-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2008-09-15T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-4175","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"linkbidscript-upgrade-sql-injection(45153)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45153"},{"name":"linkbidscript-edit-sql-injection(45155)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45155"},{"name":"6466","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/6466"},{"name":"31853","refsource":"SECUNIA","url":"http://secunia.com/advisories/31853"},{"name":"31191","refsource":"BID","url":"http://www.securityfocus.com/bid/31191"},{"name":"4299","refsource":"SREASON","url":"http://securityreason.com/securityalert/4299"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45153","name":"linkbidscript-upgrade-sql-injection(45153)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45155","name":"linkbidscript-edit-sql-injection(45155)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/6466","name":"6466","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://secunia.com/advisories/31853","name":"31853","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/31191","name":"31191","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://securityreason.com/securityalert/4299","name":"4299","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T10:08:34.914Z"}}]}}}