Unrated severityNVD Advisory· Published Jan 16, 2008· Updated Apr 23, 2026

CVE-2008-0290

Description

Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the selectskin parameter to an unspecified program, or (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in the gestion_membre.php page to base.php.

Affected products

Digitalhive/Digitalhive
cpe:2.3:a:digitalhive:digitalhive:*:*:*:*:*:*:*:*
Range: <=2.0_rc2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/27232nvdExploit
exchange.xforce.ibmcloud.com/vulnerabilities/39602nvd
www.exploit-db.com/exploits/4887nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000