CVE-2008-3417

EPSS 1.0%

SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the r parameter, a different vector than CVE-2006-6115 and CVE-2007-2561.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6135unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/31250 http://securityreason.com/securityalert/4095 https://exchange.xforce.ibmcloud.com/vulnerabilities/44022 https://www.exploit-db.com/exploits/6135 http://www.securityfocus.com/bid/30380