← Database

CVE-2008-2893

HIGH CVSS: 7.5 Published: 2008-06-27 Modified: 2026-06-16

Description

SQL injection vulnerability in news.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-2532.

Affected Platforms

Ajhyip Aj Square Aj-Hyip

Weakness Type

CWE-89

References