CVE-2008-2087

SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the host_id parameter, a different vector than CVE-2005-3817.

• CWE-89

• http://advisories.echo.or.id/adv/adv89-K-159-2008.txtBroken Link
• http://secunia.com/advisories/29983Third Party Advisory
• http://securityreason.com/securityalert/3855Exploit, Third Party Advisory
• http://www.securityfocus.com/archive/1/491396/100/0/threadedBroken Link
• http://www.securityfocus.com/bid/28971Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42096Third Party Advisory
• https://www.exploit-db.com/exploits/5517Exploit, VDB Entry
• http://advisories.echo.or.id/adv/adv89-K-159-2008.txtBroken Link
• http://secunia.com/advisories/29983Third Party Advisory
• http://securityreason.com/securityalert/3855Exploit, Third Party Advisory
• http://www.securityfocus.com/archive/1/491396/100/0/threadedBroken Link
• http://www.securityfocus.com/bid/28971Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42096Third Party Advisory
• https://www.exploit-db.com/exploits/5517Exploit, VDB Entry

Published

May 6, 2008

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-2081Directory traversal vulnerability in index.php in Siteman 2.…
• CVE-2008-2082Cross-site scripting (XSS) vulnerability in index.php in Sit…
• CVE-2008-2083SQL injection vulnerability in directory.php in Prozilla Hos…
• CVE-2008-2084SQL injection vulnerability in topics.php in the MyArticles …
• CVE-2008-2085Multiple stack-based buffer overflows in the (1) get_remote_…
• CVE-2008-2086Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update…
• CVE-2008-2088SQL injection vulnerability in admin/news.php in PHP Forge 3…
• CVE-2008-2089Unspecified vulnerability in the SCTP protocol implementatio…
• CVE-2008-2090Unspecified vulnerability in the SCTP protocol implementatio…
• CVE-2008-2091Directory traversal vulnerability in ipn.php in KubeLabs Kub…
• CVE-2008-2092Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers…
• CVE-2008-2093SQL injection vulnerability in the Profiler (com_comprofiler…