CVE-2008-4241 in Ultra Plus

Summary

SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 09/25/2008
• Disclosure: 09/25/2008
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-89 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.00421
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-4241
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-4241
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-4241/