CVE-2008-5075

no score yetEPSS 0.9%

scriptsfrenzy e-uploader pro: no CVSS score yet. EPSS 0.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) img.php, (b) file.php, (c) mail.php, (d) thumb.php, (e) zip.php, and (f) zipit.php, and (2) the view parameter to (g) browser.php.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2008-11-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

scriptsfrenzy:e-uploader_pro

References

http://securityreason.com/securityalert/4596
http://www.securityfocus.com/bid/31445
https://exchange.xforce.ibmcloud.com/vulnerabilities/45487
https://www.exploit-db.com/exploits/6596
http://securityreason.com/securityalert/4596

Check your stack JSON