CVE-2008-0290

CVE-2008-0290 describes multiple SQL injection vulnerabilities affecting Digital Hive 2.0 RC2 and earlier versions. These flaws allow remote attackers to execute arbitrary SQL commands, either unauthenticated via the 'selectskin' parameter or as an authenticated administrator via the 'user_id' parameter in 'gestion_membre.php'. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, an exploit for the 'user_id' SQL injection is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.