CVEvulnerability
CVE-2008-0543
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-02-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Pre Dynamic Institution allow remote attackers to execute arbitrary SQL commands via the (1) sloginid and (2) spass parameters to (a) login.asp and (b) siteadmin/login.asp. NOTE: some of these details are obtained from third party information.
Affected configurations
• pre projects pre dynamic institution
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/28651 Vendor Advisory
- http://securityreason.com/securityalert/3603 securityreason.com
- http://www.securityfocus.com/archive/1/487054/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27451 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39942 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/28651 Vendor Advisory
- http://securityreason.com/securityalert/3603 securityreason.com
- http://www.securityfocus.com/archive/1/487054/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27451 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39942 exchange.xforce.ibmcloud.com