← Database

CVE-2008-4642

HIGH CVSS: 7.5 Published: 2008-10-21 Modified: 2026-06-16

Description

SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action.

Affected Platforms

Astrospaces Astrospaces

Weakness Type

CWE-89

References