Unrated severityNVD Advisory· Published Jul 30, 2008· Updated Apr 23, 2026
CVE-2008-3374
CVE-2008-3374
Description
SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the rsargs array parameter in an __exp__getFeedContent action.
Affected products
11cpe:2.3:a:gregarius:gregarius:*:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:gregarius:gregarius:*:*:*:*:*:*:*:*range: <=0.5.4
- cpe:2.3:a:gregarius:gregarius:0.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:gregarius:gregarius:0.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:gregarius:gregarius:0.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:gregarius:gregarius:0.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:gregarius:gregarius:0.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:gregarius:gregarius:0.3.8:*:*:*:*:*:*:*
- cpe:2.3:a:gregarius:gregarius:0.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:gregarius:gregarius:0.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:gregarius:gregarius:0.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:gregarius:gregarius:0.5.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- www.gulftech.orgnvdExploit
- secunia.com/advisories/31260nvdVendor Advisory
- svn.gregarius.net/trac/changeset/1788/trunk/gregarius/ajax.phpnvd
- www.securityfocus.com/archive/1/494866/100/0/threadednvd
- www.securityfocus.com/bid/30423nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/44054nvd
- www.exploit-db.com/exploits/6159nvd
News mentions
0No linked articles in our index yet.