CVE-2008-4889
SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows...
CVE-2008-4889 is a high vulnerability (CVSS 7.5) in Dev\!l\'s Clanportal, published November 3, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.19%, the 68th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.19%EPSS, 68th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL commands via the users parameter in an addbuddy operation in a buddys action.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | DZCP (deV!L_z Clanportal) 1.4.9.6 - Blind SQL Injection | 2008-11-02 |
What each source reports
NVD Score used
SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL commands via the users parameter in an addbuddy operation in a buddys action.
- Record
CVE-2008-4889- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE ListNo score
SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL commands via the users parameter in an addbuddy operation in a buddys action.
- Record
CVE-2008-4889- Updated
- 2026-11-02
EUVDEUVD-2008-4868No score
SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL commands via the users parameter in an addbuddy operation in a buddys action.
- Record
EUVD-2008-4868- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qr3f-6c75-mrxxNo score
SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows...
SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL commands via the users parameter in an addbuddy operation in a buddys action.
- Record
GHSA-qr3f-6c75-mrxx- Weakness
- CWE-89
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
vupen.com/english/advisories/2008/2974
secunia.com/advisories/32458
securityfocus.com/bid/32049
securityreason.com/securityalert/4552
exploit-db.com/exploits/6961
exchange.xforce.ibmcloud.com/vulnerabilities/46268
osvdb.org/49500
nvd.nist.gov/vuln/detail/CVE-2008-4889
github.com/advisories/GHSA-qr3f-6c75-mrxx