CVE-2008-1496 - CVE House
Back to Database
Status published High CVE-2008-1496

Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier,...

Vulnerability Description

Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to (a) membre.php, and the (2) timestamp parameter to (b) the details action in achat/historique_commandes.php and (c) the facture action in factures/facture_html.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-1496

Credits & Attribution

No credits recorded in the NVD database.

References

More from peel

View All →
CVE-2021-41672
PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection...
Medium 6.5
CVE-2021-37593
PEEL Shopping version 9.4.0 allows remote SQL injection. A public...
Critical 9.1
CVE-2021-27190
A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL...
Medium 5.4
CVE-2019-20178
Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete...
Medium 6.5
CVE-2018-20848
Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php,...
High 8.8

Affected Vendor

Affected Software

peel
Vulnerable Versions:
1.0b, 2.6, 2.7

Timeline

Official Publish: March 25th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.