CVE-2008-3674

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-08-13 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in ugroups.php in PozScripts TubeGuru Video Sharing Script allows remote attackers to execute arbitrary SQL commands via the UID parameter.

Affected products

Pozscripts Tubeguru Video Sharing Script: all versions

References

http://secunia.com/advisories/31276
http://securityreason.com/securityalert/4152
http://www.securityfocus.com/bid/30455
http://www.vupen.com/english/advisories/2008/2252/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/44113
https://www.exploit-db.com/exploits/6170
http://secunia.com/advisories/31276
http://securityreason.com/securityalert/4152
http://www.securityfocus.com/bid/30455
http://www.vupen.com/english/advisories/2008/2252/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/44113
https://www.exploit-db.com/exploits/6170

Get alerted when CVE-2008-3674 or the next vulnerability affects your stack