CVE-2008-2522: Haudenschilt Battlenet Clan Script

Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in members.php in Battle.net Clan Script for PHP 1.5.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showmember parameter in a members action.

Affected products

• Haudenschilt Battlenet Clan Script: up to and including 1.5.3; version 1.5.1 only; version 1.5.2 only

Published 2008-06-03. Last modified 2026-06-16.