AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2008-0267

HIGH · CVSS 7.5 EPSS 1.15%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-01-15 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It may be remotely exploitable. It involves a SQL injection risk. Exploitation may require the attacker to be authenticated.

CVE
CVE-2008-0267
Severity
HIGH
CVSS
7.5
EPSS
1.15%

Original NVD Description

Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) status, (2) sort, and (3) way parameters to search.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (4) msg and (5) password parameters to admin.php.