CVEvulnerability
CVE-2008-2843
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-06-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in doITLive CMS 2.50 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter in an USUB action to default.asp and the (2) Licence[SpecialLicenseNumber] (aka LicenceId) cookie to edit/default.asp.
Affected configurations
• doitlive cms (<= 2.50)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/30705 Vendor Advisory
- http://www.bugreport.ir/?/43 Exploit
- http://www.securityfocus.com/bid/29789 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43161 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43163 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5849 www.exploit-db.com
- http://secunia.com/advisories/30705 Vendor Advisory
- http://www.bugreport.ir/?/43 Exploit
- http://www.securityfocus.com/bid/29789 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43161 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43163 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5849 www.exploit-db.com