CVE-2008-5921

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in albums.php in Umer Inc Songs Portal allows remote attackers to execute arbitrary SQL commands via the id parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jan 21, 2009
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2008

CVE-2008-59227.5Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS (CFAGCMS) 1 allow remote attackers CVE-2008-59237.5SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands the cat paraCVE-2008-59247.5SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands via the CVE-2008-59255.0ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to dCVE-2008-59267.5Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commanCVE-2008-59277.5Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPNews 0.0.6 allow remote attackers to execute arbitrary SQL commands CVE-2008-59287.5SQL injection vulnerability in redir.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commandCVE-2008-59295.0VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allows remote attackers toCVE-2008-59307.5SQL injection vulnerability in admin/blog_comments.asp in The Net Guys ASPired2Blog allows remote attackers to execute arbitrary SQL commandCVE-2008-59315.0The Net Guys ASPired2Blog stores sensitive information under the web root with insufficient access control, which allows remote attackers toCVE-2008-59325.0CodeAvalanche FreeForum stores sensitive information under the web root with insufficient access control, which allows remote attackers to dCVE-2008-59334.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in CMS ISWEB 3.0 allow remote attackers to inject arbitrary web script or H
CVE-2008-5921: High severity, CVSS 7.5 | Vulnix