CVE-2008-5191
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 18%
from disclosure to weapon1944 days
Published on NVDNov 21
1st PoC+1944d
metasploit+1945d
exploitation probability
18%top 3% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
Multiple SQL injection vulnerabilities in SePortal 2.4 allow remote attackers to execute arbitrary SQL commands via the (1) poll_id parameter to poll.php and the (2) sp_id parameter to staticpages.php.
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/32359unverifiedexploitdbwww.exploit-db.com/exploits/32621unverifiedcve_referencewww.exploit-db.com/exploits/5960unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.