CVE-2008-1613 SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId par...
HighCVSS 7.5
EPSS 7.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| reddot cms | = 6.5 | No fix listed |
| reddot cms | = 7.0 | No fix listed |
| reddot cms | = 7.5-build_7.5.0.48 | No fix listed |
References
- 29843 third-party-advisory
- www.irmplc.com
- 20080421 IRM Security Advisory : RedDot CMS SQL injection vulnerability mailing-list
- 28872 vdb-entry
- reddot-iord-sql-injection(41924) vdb-entry
- 5482 exploit