Vulnerability Details CVE-2008-6475
SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and earlier allows remote attackers to execute arbitrary SQL commands via the Via HTTP header (HTTP_VIA) to index.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.9%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2008-6475
-
cpe:2.3:a:drake_team:drake_cms:*
-
cpe:2.3:a:drake_team:drake_cms:0.2