← Database

CVE-2008-2791

HIGH CVSS: 7.5 Published: 2008-06-20 Modified: 2026-06-16

Description

SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms

Kalptaru Infotech Comparison Engine Power Script

Weakness Type

CWE-89

References