VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 26, 2009· Updated Jun 16, 2026

CVE-2008-7085

CVE-2008-7085

Description

Multiple SQL injection vulnerabilities in TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the viewpage action to the default URI, probably index.php, or (2) divid parameter in the schedule action to index.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Thehockeystop/Hockeystats Online3 versions
    cpe:2.3:a:thehockeystop:hockeystats_online:2.0:*:advanced:*:*:*:*:*+ 2 more
    • cpe:2.3:a:thehockeystop:hockeystats_online:2.0:*:advanced:*:*:*:*:*
    • cpe:2.3:a:thehockeystop:hockeystats_online:2.0:*:basic:*:*:*:*:*
    • (no CPE)range: 2.0 Basic and Advanced

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.