CVE-2008-6487 in DigiAffiliate

Zusammenfassung

von MITRE

Multiple SQL injection vulnerabilities in login.asp in Digiappz DigiAffiliate 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) admin and (2) password fields.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservieren: 18.03.2009
• Veröffentlichung: 18.03.2009
• Moderieren: akzeptiert
• Eintrag: VDB-47187
• CPE: bereit
• CWE: CWE-89 (bestätigt)
• Exploit: Download
• CVSS: 7.5 (NVD)
• EPSS: 0.00967
• KEV: nein
• Aktivitäten: very low
• Sektor: Transportation, Telecommunication

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-6487
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-6487
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-6487/