CVE-2008-2504

CVE-2008-2504 describes multiple SQL injection vulnerabilities in Simpel Side Netbutik versions 1 through 4. Attackers can exploit these flaws by injecting malicious SQL commands into the 'cat' parameter of netbutik.php and the 'id' parameter of product.php. This vulnerability carries a CVSS score of 7.5, indicating a high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed in CISA KEV, exploit code (EDB-5665) is publicly available, though there is no evidence of active exploitation or significant community discussion.