CVE-2008-5166: Easysitenetwork Riddles Website

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL commands via the riddleid parameter.

Affected products

Published 2008-11-19. Last modified 2026-06-16.