CVE-2008-6477: Mumbojumbo OP4

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

Affected products

• Mumbojumbo OP4: any version

Published 2009-03-16. Last modified 2026-06-16.