CVE-2008-5064: H&h Websoccer

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

• H&h Websoccer: version 2.80 only

Published 2008-11-13. Last modified 2026-06-16.