← Database

CVE-2008-4706

HIGH CVSS: 7.5 Published: 2008-10-23 Modified: 2026-06-16

Description

SQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows remote attackers to execute arbitrary SQL commands via the mapid parameter in a showdetails action to (1) vbgooglemaphse.php and (2) mapa.php.

Affected Platforms

Vbulletin Vbgooglemap

Weakness Type

CWE-89

References