CVEvulnerability
CVE-2008-1613
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-04-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter.
Affected configurations
• reddot cms 6.5
• reddot cms 7.0
• reddot cms 7.5
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/29843 secunia.com
- http://www.irmplc.com/index.php/167-Advisory-026 www.irmplc.com
- http://www.securityfocus.com/archive/1/491139/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28872 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41924 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5482 www.exploit-db.com
- http://secunia.com/advisories/29843 secunia.com
- http://www.irmplc.com/index.php/167-Advisory-026 www.irmplc.com
- http://www.securityfocus.com/archive/1/491139/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28872 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41924 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5482 www.exploit-db.com