← Database

CVE-2008-3359

HIGH CVSS: 7.5 Published: 2008-07-29 Modified: 2026-06-16

Description

SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Platforms

Owl Intranet Knowledgebase

Weakness Type

CWE-89

References