{"api_version":"1","generated_at":"2026-07-23T06:00:28+00:00","cve":"CVE-2008-4175","urls":{"html":"https://cve.report/CVE-2008-4175","api":"https://cve.report/api/cve/CVE-2008-4175.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-4175","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-4175"},"summary":{"title":"CVE-2008-4175","description":"Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-09-23 15:25:42","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-89","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.5","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://www.exploit-db.com/exploits/6466","name":"https://www.exploit-db.com/exploits/6466","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Link Bid Script 1.5 - Multiple SQL Injections - PHP webapps Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/31191","name":"http://www.securityfocus.com/bid/31191","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Link Bid Script 'upgrade.php' SQL Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45153","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45153","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45155","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45155","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/31853","name":"http://secunia.com/advisories/31853","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Link Bid Two SQL Injection Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/4299","name":"http://securityreason.com/securityalert/4299","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - Link Bid Script 1.5 Multiple Remote SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4175","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4175","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"4175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linkbidscript","cpe5":"linkbidscript","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T10:08:34.914Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"linkbidscript-upgrade-sql-injection(45153)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45153"},{"name":"linkbidscript-edit-sql-injection(45155)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45155"},{"name":"6466","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/6466"},{"name":"31853","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/31853"},{"name":"31191","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/31191"},{"name":"4299","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/4299"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-09-15T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"linkbidscript-upgrade-sql-injection(45153)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45153"},{"name":"linkbidscript-edit-sql-injection(45155)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45155"},{"name":"6466","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/6466"},{"name":"31853","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/31853"},{"name":"31191","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/31191"},{"name":"4299","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/4299"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-4175","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"linkbidscript-upgrade-sql-injection(45153)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45153"},{"name":"linkbidscript-edit-sql-injection(45155)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45155"},{"name":"6466","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/6466"},{"name":"31853","refsource":"SECUNIA","url":"http://secunia.com/advisories/31853"},{"name":"31191","refsource":"BID","url":"http://www.securityfocus.com/bid/31191"},{"name":"4299","refsource":"SREASON","url":"http://securityreason.com/securityalert/4299"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-4175","datePublished":"2008-09-23T15:00:00.000Z","dateReserved":"2008-09-23T00:00:00.000Z","dateUpdated":"2024-08-07T10:08:34.914Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-09-23 15:25:42","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-89","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linkbidscript:linkbidscript:1.5:*:*:*:*:*:*:*","matchCriteriaId":"EEB5D20D-05F3-462D-A102-2D8C4CEBADEE"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"4175","Ordinal":"1","Title":"CVE-2008-4175","CVE":"CVE-2008-4175","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"4175","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php.","Type":"Description","Title":"CVE-2008-4175"},{"CveYear":"2008","CveId":"4175","Ordinal":"2","NoteData":"2008-09-23","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"4175","Ordinal":"3","NoteData":"2017-09-28","Type":"Other","Title":"Modified"}]}}}