Vulnerability Details CVE-2008-6678
SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via the sNickName parameter in a profile action to default.asp.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.8%
CVSS Severity
CVSS v2 Score 7.5
References
- http://osvdb.org/46228
- http://secunia.com/advisories/30501
- http://www.bugreport.ir/39/exploit.htm
- http://www.bugreport.ir/index_39.htm
- http://www.securityfocus.com/bid/29524
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42866
- http://osvdb.org/46228
- http://secunia.com/advisories/30501
- http://www.bugreport.ir/39/exploit.htm
- http://www.bugreport.ir/index_39.htm
- http://www.securityfocus.com/bid/29524
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42866
Products affected by CVE-2008-6678
-
cpe:2.3:a:quickersite:quickersite:1.8.5