CVE Database
/

CVE-2008-4700

Back to search

CVE-2008-4700

Published: Oct 22, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the libera_staff_pass cookie parameter.

VendorProductVersions

n/a

n/a

affected
n/a

References

4472
third-party-advisory
x_refsource_SREASON
31811
third-party-advisory
x_refsource_SECUNIA
libera-admin-sql-injection(45011)
vdb-entry
x_refsource_XF
31102
vdb-entry
x_refsource_BID
6416
exploit
x_refsource_EXPLOIT-DB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now