CVEvulnerability
CVE-2008-6365
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-03-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password, related to the uname or pass parameters to logon.jsp or logon_processing.jsp. NOTE: some of these details are obtained from third party information.
Affected configurations
• adserversolutions ad management software
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/33072 Vendor Advisory
- http://www.securityfocus.com/bid/32790 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47282 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7424 www.exploit-db.com
- http://secunia.com/advisories/33072 Vendor Advisory
- http://www.securityfocus.com/bid/32790 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47282 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7424 www.exploit-db.com