CVE-2008-3191

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-07-16 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) City, (2) Interest, (3) Email, (4) Icq, (5) msn, or (6) Yahoo Messenger field in an edit_profile action.

Affected products

Marcioforum Mforum: 0.1a

References

http://securityreason.com/securityalert/4003
http://www.securityfocus.com/bid/30214
https://exchange.xforce.ibmcloud.com/vulnerabilities/43757
https://www.exploit-db.com/exploits/6068
http://securityreason.com/securityalert/4003
http://www.securityfocus.com/bid/30214
https://exchange.xforce.ibmcloud.com/vulnerabilities/43757
https://www.exploit-db.com/exploits/6068

Get alerted when CVE-2008-3191 or the next vulnerability affects your stack