← Database

CVE-2008-3598

HIGH CVSS: 7.5 Published: 2008-08-12 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in psipuss 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the Cid parameter to categories.php or (2) the Username parameter to login.php.

Affected Platforms

Psi-Labs Psipuss

Weakness Type

CWE-89

References