← Database

CVE-2008-4091

MEDIUM CVSS: 6.8 Published: 2008-09-15 Modified: 2026-06-16

Description

SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action.

Affected Platforms

Source Workshop Web Directory Script

Weakness Type

CWE-89

References