Vulnerability Details CVE-2008-6026
SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.6%
CVSS Severity
CVSS v2 Score 7.5
References
- http://packetstorm.linuxsecurity.com/0809-exploits/bluecube.txt
- http://secunia.com/advisories/31967
- http://www.securityfocus.com/bid/31323
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45322
- http://packetstorm.linuxsecurity.com/0809-exploits/bluecube.txt
- http://secunia.com/advisories/31967
- http://www.securityfocus.com/bid/31323
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45322
Products affected by CVE-2008-6026
-
cpe:2.3:a:bluecube:bluecube_cms:*