CVE-2008-6142: China-On-Site Flexphpic

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPic 0.0.4 and FlexPHPic Pro 0.0.3, and other 0.0.x versions, allow remote attackers to execute arbitrary SQL commands via (1) the checkuser parameter (aka username field), or (2) the checkpass parameter (aka password field), to admin/index.php.

Affected products

• China-On-Site Flexphpic: version 0.0.3 only; version 0.0.4 only

Published 2009-02-16. Last modified 2026-06-16.