CVEvulnerability
CVE-2008-6487
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-03-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in login.asp in Digiappz DigiAffiliate 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) admin and (2) password fields.
Affected configurations
• digiappz digiaffiliate (<= 1.4)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://www.securityfocus.com/bid/32217 Exploit
- http://www.vupen.com/english/advisories/2008/3068 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46500 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7067 www.exploit-db.com
- http://www.securityfocus.com/bid/32217 Exploit
- http://www.vupen.com/english/advisories/2008/3068 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46500 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7067 www.exploit-db.com