CVE-2008-3762
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2008-3762
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
SQL injection vulnerability in onlinestatus_html.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the dep parameter, related to lack of input sanitization in the get function in global.php.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Turnkey PHPLiveHelper onlinestatus_html.php SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Turnkey PHP Live Helper是一套PHP编写的在线客户系统。 PHP Live Helper 2.0.1及其之前版本的版本中onlinestatus_html.php中存在SQL注入漏洞。 由于global.php中的get函数缺乏对用户输入的检查，远程攻击者利用onlinestatus_html.php的dep参数实现SQL注入，执行任意SQL命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2008-3762
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-3762
请登录查看更多情报信息。
- http://www.gulftech.org/?node=research&article_id=00124-08162008x_refsource_MISC
- PHP Live Helper <= 2.0.1 Multiple Vulnerabilities - CXSecurity.comthird-party-advisoryx_refsource_SREASON
- https://nvd.nist.gov/vuln/detail/CVE-2008-3762
Same Patch Batch · n/a · 2008-08-21 · 18 CVEs total
| CVE-2008-3756 | YourFreeWorld ViralMarketin tr.php SQL注入漏洞 | |
| CVE-2008-3765 | QuickPoll SQL注入漏洞 | |
| CVE-2008-3764 | Turnkey PHPLiveHelper chat.php 远程执行代码漏洞 | |
| CVE-2008-3763 | Turnkey PHPLiveHelper libsecure.php 变量重写漏洞 | |
| CVE-2008-3761 | Vmware软件 hcmon.sys 本地拒绝服务漏洞 | |
| CVE-2008-3760 | Vanilla people.php 跨站伪造请求漏洞 | |
| CVE-2008-3759 | Vanilla ajax/UpdateCheck.php 跨站伪造请求漏洞 | |
| CVE-2008-3758 | Vanilla 多个跨站脚本攻击漏洞 | |
| CVE-2008-3757 | YourFreeWorld ForcedMatrixScript tr1.php SQL注入漏洞 | |
| CVE-2008-3748 | ActivePHPBookmarks view_group.php SQL注入漏洞 | |
| CVE-2008-3755 | YourFreeWorld Classifieds Script SQL注入漏洞 | |
| CVE-2008-3754 | YourFreeWorld StylishTextAdsScript trl.php SQL注入漏洞 | |
| CVE-2008-3753 | YourFreeWorld ProgramsRatingScript details.php SQL注入漏洞 | |
| CVE-2008-3752 | YourFreeWorld Ad-ExchangeScript tr.php SQL注入漏洞 | |
| CVE-2008-3751 | YourFreeWorld Short Url&UrlTracker tr.php SQL注入漏洞 | |
| CVE-2008-3750 | YourFreeWorld URLRotatorScript tr.php SQL注入漏洞 | |
| CVE-2008-3749 | YourFreeWorld Classifieds Script SQL注入漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2008-3762
No comments yet