CVE-2008-3867

no score yetEPSS 1.2%

SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote attackers to execute arbitrary SQL commands via the email_user_key parameter.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2008-11-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cce-interact:interact

References

http://secunia.com/advisories/32359
http://secunia.com/secunia_research/2008-44/
http://securityreason.com/securityalert/4537
http://sourceforge.net/tracker/index.php?func=detail&aid=2208205&group_id=69681&atid=525406
http://www.securityfocus.com/archive/1/497967/100/0/threaded

Check your stack JSON