CVEvulnerability
CVE-2008-6220
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-02-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the pass parameter.
Affected configurations
• cafuego simple document management system 1.1.4
• cafuego simple document management system 1.1.5
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/32502 Vendor Advisory
- http://www.securityfocus.com/bid/32114 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46342 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6987 www.exploit-db.com
- http://secunia.com/advisories/32502 Vendor Advisory
- http://www.securityfocus.com/bid/32114 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46342 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6987 www.exploit-db.com