SQL Injection Vulnerability in i-Net Solution Orkut Clone
CVE-2008-5970

Currently unrated

Key Information:

Vendor: I-netsolution
Status: Orkut Clone
Vendor: CVE Published:; 27 January 2009

🔔 Create I-netsolution Vulnerability Alert

What is CVE-2008-5970?

The vulnerability in the 'profile_social.php' file of the i-Net Solution Orkut Clone permits remote authenticated users to execute arbitrary SQL commands through manipulation of the 'id' parameter. This flaw can lead to unauthorized access to sensitive data and may allow attackers to compromise the integrity and confidentiality of the application’s database.

References

http://secunia.com/advisories/32937

third-party-advisoryx_refsource_SECUNIA

http://www.securityfocus.com/bid/32600

vdb-entryx_refsource_BID

https://exchange.xforce.ibmcloud.com/vulnerabilities/47013

vdb-entryx_refsource_XF

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 27, 2009
Vulnerability Reserved
Jan 26, 2009

CVE-2008-5970 Data

JSON