CVE-2008-0290 - CVE House
Back to Database
Status published High CVE-2008-0290

Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and...

Vulnerability Description

Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the selectskin parameter to an unspecified program, or (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in the gestion_membre.php page to base.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-0290

Credits & Attribution

No credits recorded in the NVD database.

References

More from digitalhive

View All →
CVE-2008-2415
Directory traversal vulnerability in template/purpletech/base_include.php in DigitalHive (aka hive) 2.0...
Medium 6.8
CVE-2006-5493
PHP remote file inclusion vulnerability in template/purpletech/base_include.php in DigitalHive 2.0...
High 7.5
CVE-2005-0884
DigitalHive 2.0 allows remote attackers to re-install the product by...
High 7.5
CVE-2005-0883
Multiple cross-site scripting (XSS) vulnerabilities in base.php for DigitalHive 2.0...
Medium 4.3

Affected Vendor

digitalhive

View all reports →

Affected Software

digitalhive
Vulnerable Versions:
0

Timeline

Official Publish: January 16th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.