CVE-2008-3556: Haudenschilt Battlenet Clan Script

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) showmember parameter in a members action and the (2) thread parameter in a board action. NOTE: vector 1 might be the same as CVE-2008-2522.

Affected products

• Haudenschilt Battlenet Clan Script: version 1.5.2 only

Published 2008-08-08. Last modified 2026-06-16.