CVE-2008-2416

CVE-2008-2416 describes a SQL injection vulnerability in FicHive 1.0, specifically within the index.php file when handling the 'category' parameter in a Fiction action. This flaw allows unauthenticated remote attackers to execute arbitrary SQL commands, potentially leading to data compromise, modification, or denial of service. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.