VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 2, 2008· Updated Jun 16, 2026

CVE-2008-1646

CVE-2008-1646

Description

SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the dl_id parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Arnos Toolbox/Wp Download
    cpe:2.3:a:arnos_toolbox:wp-download:1.2:*:*:*:*:*:*:*
  • WordPress/Wp Download2 versions
    cpe:2.3:a:wordpress:wp_download:1.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:wordpress:wp_download:1.2:*:*:*:*:*:*:*
    • (no CPE)range: = 1.2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.