CVE-2008-1050 identifies a SQL injection vulnerability in the index.php component of Softbiz Jokes & Funny Pics Script, allowing remote attackers to execute arbitrary SQL commands via the 'sbcat_id' parameter. This vulnerability carries a CVSS v2 score of 7.5 (High), indicating it is easily exploitable over the network with low complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. Although there is no evidence of active exploitation or inclusion in CISA's KEV catalog, public exploit code is available on ExploitDB, suggesting a known and documented attack method.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:softbizscripts:jokes_and_funny_pictures_script:-:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.