CVE-2008-1990 in Acidcat

Riassunto

di MITRE

Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) cID parameter to default.asp and the (2) username parameter to main_login2.asp.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 27/04/2008
• Divulgazione: 27/04/2008
• Moderazione: accettato
• Voce: VDB-42163
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.01189
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider, Lawfirm, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-1990
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-1990
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-1990/