CVE-2008-6284 in Z1Exchange

Riassunto

di MITRE

SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via the site parameter.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 25/02/2009
• Divulgazione: 25/02/2009
• Moderazione: accettato
• Voce: VDB-46795
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.00967
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-6284
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-6284
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-6284/