CVE-2008-1613

SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter.

Link	Resource
http://www.irmplc.com/index.php/167-Advisory-026
http://www.securityfocus.com/bid/28872
http://secunia.com/advisories/29843
https://exchange.xforce.ibmcloud.com/vulnerabilities/41924
https://www.exploit-db.com/exploits/5482
http://www.securityfocus.com/archive/1/491139/100/0/threaded

Configuration 1

cpe:2.3:a:reddot:cms:6.5:*:*:*:*:*:*:* cpe:2.3:a:reddot:cms:7.5:build_7.5.0.48:*:*:*:*:*:* cpe:2.3:a:reddot:cms:7.0:*:*:*:*:*:*:*

---

Published : 2008-04-22 04:41

Updated : 2018-10-11 08:35

---

NVD link : CVE-2008-1613

Mitre link : CVE-2008-1613

No products.

CWE-89