CVE-2008-1726

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-04-11 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kqid parameter to (a) articletext.php and (b) articletextonly.php and the (2) username parameter to (c) logincheck.php.

Affected products

Myknowledgequest Knowledgequest: 2.6

References

http://secunia.com/advisories/29716
http://www.osvdb.org/44254
http://www.osvdb.org/44255
http://www.osvdb.org/44256
http://www.securityfocus.com/bid/28713
http://www.securityfocus.com/bid/28716
https://exchange.xforce.ibmcloud.com/vulnerabilities/41746
https://www.exploit-db.com/exploits/5421
http://secunia.com/advisories/29716
http://www.osvdb.org/44254
http://www.osvdb.org/44255
http://www.osvdb.org/44256

Get alerted when CVE-2008-1726 or the next vulnerability affects your stack