CVE-2008-3748
SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06...
SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploit likelihood
What each source reports
NVD Score used
SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to execute arbitrary SQL commands via the id parameter.
- Record
CVE-2008-3748- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to execute arbitrary SQL commands via the id parameter.
- Record
CVE-2008-3748- Updated
- 2026-11-02
EUVDEUVD-2008-3734 No score
SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to execute arbitrary SQL commands via the id parameter.
- Record
EUVD-2008-3734- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ghgp-8h5v-83fv No score
SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06...
SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to execute arbitrary SQL commands via the id parameter.
- Record
GHSA-ghgp-8h5v-83fv- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Active PHP BookMarks 1.3 - SQL Injection | 2009-12-22 |
| Exploit-DB | Active PHP BookMarks 1.1.02 - SQL Injection | 2008-08-19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3748 is a high vulnerability (CVSS 7.5) in Lbstone Active Php Bookmarks, published August 21, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.01%, the 63rd percentile. No source names a fixed version.