← Database

CVE-2008-3719

HIGH CVSS: 7.5 Published: 2008-08-20 Modified: 2026-06-16

Description

SQL injection vulnerability in directory.php in SFS Affiliate Directory allows remote attackers to execute arbitrary SQL commands via the id parameter in a deadlink action.

Affected Platforms

Scripts-For-Sites Affiliate Directory

Weakness Type

CWE-89

References