CVEvulnerability
CVE-2008-5653
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-12-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter. NOTE: some of these details are obtained from third party information.
Affected configurations
• myiosoft.com ajaxportal 3.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/49700 osvdb.org
- http://secunia.com/advisories/32673 Vendor Advisory
- http://www.securityfocus.com/bid/32199 www.securityfocus.com
- https://www.exploit-db.com/exploits/7044 www.exploit-db.com
- http://osvdb.org/49700 osvdb.org
- http://secunia.com/advisories/32673 Vendor Advisory
- http://www.securityfocus.com/bid/32199 www.securityfocus.com
- https://www.exploit-db.com/exploits/7044 www.exploit-db.com