CVE-2008-3762

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-08-21 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in onlinestatus_html.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the dep parameter, related to lack of input sanitization in the get function in global.php.

Affected products

Turnkeywebtools Php Live Helper: through 2.0.1; 2.0, 2.0-beta_1, 2.0-beta_2, 2.0-beta_3, 2.0-beta_4, 2.0-beta_5 (+1)

References

http://secunia.com/advisories/31521
http://securityreason.com/securityalert/4178
http://www.gulftech.org/?node=research&article_id=00124-08162008
http://www.securityfocus.com/archive/1/495542/100/0/threaded
http://www.securityfocus.com/bid/30729
https://exchange.xforce.ibmcloud.com/vulnerabilities/44568
https://www.exploit-db.com/exploits/6261
http://secunia.com/advisories/31521
http://securityreason.com/securityalert/4178
http://www.gulftech.org/?node=research&article_id=00124-08162008
http://www.securityfocus.com/archive/1/495542/100/0/threaded
http://www.securityfocus.com/bid/30729

Get alerted when CVE-2008-3762 or the next vulnerability affects your stack