CVE-2008-3251
Last modified
CVE-2008-3251 is a vulnerability of currently unknown severity. Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the opp parameter to tampereunited/opponent.php; or the id parameter to (2) index.php, (3) player.php, (4) matchdetails.php, or (5) additionalpage.php in tampereunited/.. EPSS estimates a 2.43% chance of exploitation in the next 30 days.
Description
Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the opp parameter to tampereunited/opponent.php; or the id parameter to (2) index.php, (3) player.php, (4) matchdetails.php, or (5) additionalpage.php in tampereunited/.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tpl Design | Tplsoccersite | 1.0 |
References
- http://secunia.com/advisories/31111Vendor Advisory
- http://secunia.com/advisories/31111Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-3251?
How severe is CVE-2008-3251?
How do I fix CVE-2008-3251?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-3245SQL injection vulnerability in phpHoo3.php in phpHoo3 4.3.9,…
- CVE-2008-3246Unspecified vulnerability in the PDF distiller component in …
- CVE-2008-3247The LDT implementation in the Linux kernel 2.6.25.x before 2…
- CVE-2008-3248qiomkfile in the Quick I/O for Database feature in Symantec …
- CVE-2008-3249The client in Lenovo System Update before 3.14 does not prop…
- CVE-2008-3250SQL injection vulnerability in index.php in Arctic Issue Tra…
- CVE-2008-3252Stack-based buffer overflow in the read_article function in …
- CVE-2008-3253Cross-site scripting (XSS) vulnerability in the XenAPI HTTP …
- CVE-2008-3254SQL injection vulnerability in index.php in preCMS 1 allows …
- CVE-2008-3255Cross-site scripting (XSS) vulnerability in LunarNight Labor…
- CVE-2008-3256SQL injection vulnerability in folder.php in Siteframe CMS 3…
- CVE-2008-3257Stack-based buffer overflow in the Apache Connector (mod_wl)…
Are you affected by CVE-2008-3251?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST