Unrated severityNVD Advisory· Published Oct 7, 2008· Updated Apr 23, 2026
CVE-2008-4457
CVE-2008-4457
Description
SQL injection vulnerability in inc/inc_statistics.php in MemHT Portal 3.9.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a stats_res cookie to index.php.
Affected products
29cpe:2.3:a:memht:memht_portal:*:*:*:*:*:*:*:*+ 28 more
- cpe:2.3:a:memht:memht_portal:*:*:*:*:*:*:*:*range: <=3.9.0
- cpe:2.3:a:memht:memht_portal:1.0:final:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:1.5:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:1.5:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:2.0:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:2.0:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:2.5:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:2.5:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:2.9:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:2.9:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.0:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.0:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.1:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.1:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.2:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.3:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.3:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.4.5:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.4.5:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.4:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.4:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.5.0:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.8.5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- www.memht.com/news_95_Important-fix-for-all-MemHT-Versions.htmlnvdPatch
- www.securityfocus.com/bid/31045nvdPatch
- secunia.com/advisories/31751nvdVendor Advisory
- securityreason.com/securityalert/4288nvd
- www.vupen.com/english/advisories/2008/2510nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/44930nvd
- www.exploit-db.com/exploits/6393nvd
News mentions
0No linked articles in our index yet.