CVE-2008-0286

CVE-2008-0286 describes a SQL injection vulnerability in the admin/login.php component of Article Dashboard, affecting all versions of the product. This flaw allows unauthenticated remote attackers to execute arbitrary SQL commands by manipulating the 'user' or 'password' fields during login attempts. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.