VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 21, 2008· Updated Apr 23, 2026

CVE-2008-3762

CVE-2008-3762

Description

SQL injection vulnerability in onlinestatus_html.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the dep parameter, related to lack of input sanitization in the get function in global.php.

Affected products

8
  • Turnkey Web Tools/PHP Live Helper8 versions
    cpe:2.3:a:turnkeywebtools:php_live_helper:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:turnkeywebtools:php_live_helper:*:*:*:*:*:*:*:*range: <=2.0.1
    • cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_1:*:*:*:*:*:*
    • cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_2:*:*:*:*:*:*
    • cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_3:*:*:*:*:*:*
    • cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_4:*:*:*:*:*:*
    • cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_5:*:*:*:*:*:*
    • cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_6:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.