CVEvulnerability
CVE-2008-6236
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-02-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected configurations
• cafuego simple document management system 1.1.4
• cafuego simple document management system 1.1.5
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/32502 Vendor Advisory
- http://www.securityfocus.com/bid/32114 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46342 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48944 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/32502 Vendor Advisory
- http://www.securityfocus.com/bid/32114 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46342 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48944 exchange.xforce.ibmcloud.com