CVE-2008-0290

no score yetEPSS 1.0%

Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the selectskin parameter to an unspecified program, or (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in the gestion_membre.php page to base.php.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2008-01-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

digitalhive:digitalhive

References

http://www.securityfocus.com/bid/27232
https://exchange.xforce.ibmcloud.com/vulnerabilities/39602
https://www.exploit-db.com/exploits/4887
http://www.securityfocus.com/bid/27232
https://exchange.xforce.ibmcloud.com/vulnerabilities/39602

Check your stack JSON