Vulnerability Details CVE-2008-6152
SQL injection vulnerability in deptdisplay.asp in SepCity Faculty Portal allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: this was originally reported for Lawyer Portal, which does not have a deptdisplay.asp file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.8%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/33357
- http://www.securityfocus.com/bid/33040
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47621
- https://www.exploit-db.com/exploits/7610
- http://secunia.com/advisories/33357
- http://www.securityfocus.com/bid/33040
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47621
- https://www.exploit-db.com/exploits/7610
Products affected by CVE-2008-6152
-
cpe:2.3:a:sepcity:faculty_portal:-