CVE-2008-4458: E-PHP Scripts b2b Trading Marketplace Script

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action.

Affected products

• E-PHP Scripts b2b Trading Marketplace Script: any version

Published 2008-10-07. Last modified 2026-06-16.