CVE-2008-5890

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jan 12, 2009
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2008

CVE-2008-58914.3Cross-site scripting (XSS) vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject arbiCVE-2008-58927.5Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL commands via (1) the ID parameter toCVE-2008-58932.6Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inject arbitrary web script or HTCVE-2008-58946.8Directory traversal vulnerability in index.php in Mediatheka 4.2 allows remote attackers to include and execute arbitrary local files via a CVE-2008-58957.5SQL injection vulnerability in connection.php in Mediatheka 4.2 and earlier allows remote attackers to execute arbitrary SQL commands via thCVE-2008-58967.5CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to CVE-2008-58977.5CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which allows remote attackers CVE-2008-58987.5CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to dCVE-2008-58997.5CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows remote attackers to CVE-2008-59007.5CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows remote attackers to doCVE-2008-59017.5iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to dowCVE-2008-59027.5Buffer overflow in the xrdp_bitmap_invalidate function in xrdp/xrdp_bitmap.c in xrdp 0.4.1 and earlier allows remote attackers to execute ar
CVE-2008-5890: High severity, CVSS 7.5 | Vulnix