CVE-2008-1613

SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

7.53% chance of exploitation in the next 30 days, 94th percentile

Published

2008-04-21

Updated

2024-08-07

Proof-of-concept exploits (1)

• SECFORCE/CVE-2008-16132★ · 2017-05-03

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/5482

References

• CVE Record
• NVD entry

Related

• CVE-2008-5416
• CVE-2011-3368
• CVE-2011-4107
• CVE-2017-3599
• CVE-2018-8941
• CVE-2020-28647