CVE-2008-4620

Published: Oct 21, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in Meeting Room Booking System (MRBS) before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to (1) month.php, and possibly (2) day.php and (3) week.php.

Affected (31)

Products: Mrbs: Mrbs

Mrbs

1 product

Mrbs

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Mrbs Mrbs	Up to 1.2.6
Mrbs Mrbs	Version 0.5
Mrbs Mrbs	Version 0.6
Mrbs Mrbs	Version 0.7
Mrbs Mrbs	Version 0.8
Mrbs Mrbs	Version 0.8 pre1
Mrbs Mrbs	Version 0.8 pre2
Mrbs Mrbs	Version 0.8 pre3
Mrbs Mrbs	Version 0.8 pre4
Mrbs Mrbs	Version 0.8 pre5
Mrbs Mrbs	Version 0.8 pre6
Mrbs Mrbs	Version 0.9.1
Mrbs Mrbs	Version 0.9.2
Mrbs Mrbs	Version 0.9 pre-1
Mrbs Mrbs	Version 0.9 pre-2
Mrbs Mrbs	Version 1.0
Mrbs Mrbs	Version 1.0 pre-1
Mrbs Mrbs	Version 1.0 pre-2
Mrbs Mrbs	Version 1.1
Mrbs Mrbs	Version 1.1 pre-1
Mrbs Mrbs	Version 1.1 pre-2
Mrbs Mrbs	Version 1.2.1
Mrbs Mrbs	Version 1.2.2
Mrbs Mrbs	Version 1.2.3
Mrbs Mrbs	Version 1.2.4
Mrbs Mrbs	Version 1.2.5
Mrbs Mrbs	Version 1.2.6.1
Mrbs Mrbs	Version 1.2
Mrbs Mrbs	Version 1.2 pre-1
Mrbs Mrbs	Version 1.2 pre-2
Mrbs Mrbs	Version 1.2 pre-3