VULNERABILITY INTELLIGENCE
CVE-2008-0099
CVSS score6.8 MEDIUM
EPSS probability0.85%
CISA KEVNot currently listed
Published2008-01-08
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the searchtext parameter to search.php, and unspecified other vectors.
Weakness classification
- CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')