SQL Injection in Mrbs

CVE-2008-4620

SQL injection vulnerability in Meeting Room Booking System (MRBS) before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to (1) month.php, and possibly (2) day.php and (3) week.php.

Vulnerability class: SQL Injection

EPSS: 0.010 (60.5th percentile) — read the EPSS interpretation.

Affected products

  • Mrbs — versions 0.5, 0.6, 0.7
  • N/a — versions n/a

Weakness classification (CWE)

References