Vulnerability Details CVE-2008-6656
Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to listings.php and (2) the username field to login.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.3%
CVSS Severity
CVSS v2 Score 7.5
References
- http://freshmeat.net/projects/openauto/releases/277061
- http://osvdb.org/50255
- http://osvdb.org/50256
- http://www.securityfocus.com/bid/29027
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42158
- https://www.exploit-db.com/exploits/5531
- http://freshmeat.net/projects/openauto/releases/277061
- http://osvdb.org/50255
- http://osvdb.org/50256
- http://www.securityfocus.com/bid/29027
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42158
- https://www.exploit-db.com/exploits/5531
Products affected by CVE-2008-6656
-
cpe:2.3:a:openautoclassifieds:open_auto_classifieds:1.4.3b