Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2008-0800

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Joomla!的McQuiz (com_mcquiz) Final 组件的index.PHP存在SQL注入漏洞。远程攻击者可以通过一个user_tst_shw操作中的tid参数来执行任意SQL命令。

AI Predicted 9.8 Difficulty: Trivial EPSS 1.00% · P60

Public Exploits 1

ExploitDB · 1 EDB-5118 [webapps]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2008-0800

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
SQL injection vulnerability in index.php in the McQuiz (com_mcquiz) 0.9 Final component for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a user_tst_shw action.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Joomla! MCQuiz 组件 index.PHP SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Joomla!的McQuiz (com_mcquiz) Final 组件的index.PHP存在SQL注入漏洞。远程攻击者可以通过一个user_tst_shw操作中的tid参数来执行任意SQL命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2008-0800

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-0800

请登录查看更多情报信息。

Vendor Advisories for CVE-2008-0800 (2)

Exploits & Public PoCs for CVE-2008-0800 (1)

Same Patch Batch · n/a · 2008-02-15 · 25 CVEs total

CVE-2008-0530 Cisco Unified IP Phone DNS响应 任意代码执行漏洞
CVE-2008-0788 mybb 多个文件操作 跨站请求伪造漏洞
CVE-2008-0787 MyBB inc/datahandlers/pm.PHP SQL注入漏洞
CVE-2008-0642 Adobe RoboHelp 多个跨站脚本漏洞
CVE-2008-0794 Affiliate Market 'user/header.PHP' 目录遍历漏洞
CVE-2008-0793 Tendenci CMS 'search.asp' 多个跨站脚本漏洞
CVE-2008-0792 多个F-Secure anti-virus产品 权限许可和访问控制漏洞
CVE-2008-0791 Intermate WinIPDS ipdsserver.exe 拒绝服务攻击漏洞
CVE-2008-0790 Intermate WinIPDS ipdsserver.exe 目录遍历漏洞
CVE-2008-0789 LI-Countdown 'countdown.PHP' SQL 注入漏洞
CVE-2008-0777 FreeBSD sendfile(2)函数 权限许可和访问控制
CVE-2008-0531 Cisco Unified IP Phone challenge/response 消息 任意代码执行漏洞
CVE-2008-0795 Joomla!和Mambo 'com_xfaq' XfaQ 组件 SQL 注入漏洞
CVE-2008-0529 Cisco Unified IP Phone SCCP telnet服务器 缓冲区溢出漏洞
CVE-2008-0528 Cisco Unified IP Phone SIP固件 Internet邮件扩展(MIME)编码 缓冲区溢出漏洞
CVE-2008-0527 Cisco Unified IP Phone SCCP HTTP服务器 拒绝服务漏洞
CVE-2008-0526 Cisco Unified IP Phone SCCP固件超大ICMP回显请求报文 拒绝服务漏洞
CVE-2008-0803 lookstrike lan_manager sys_conf[path][real] 参数 多个PHP远程文件包含漏洞
CVE-2008-0802 Joomla! MediaSlide 组件 index.PHP SQL注入漏洞
CVE-2008-0801 Joomla! PAXXGallery 组件 多个SQL注入漏洞

Showing top 20 of 25 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-0800

No comments yet

Leave a comment