CVE-2008-6013 Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to execute arbitrary SQL commands via unspecified vectors involving the (1) advanced search result and (2) ser...
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to execute arbitrary SQL commands via unspecified vectors involving the (1) advanced search result and (2) service resource pages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openfreeway freeway | <= 1.4.2.197 | No fix listed |
| openfreeway freeway | = 1.0.25 | No fix listed |
| openfreeway freeway | = 1.0.25-public_beta | No fix listed |
| openfreeway freeway | = 1.0.59 | No fix listed |
| openfreeway freeway | = 1.0.060 | No fix listed |
| openfreeway freeway | = 1.1.1.76 | No fix listed |
| openfreeway freeway | = 1.1.1.80 | No fix listed |
| openfreeway freeway | = 1.1.1.81 | No fix listed |
| openfreeway freeway | = 1.2.0.113 | No fix listed |
| openfreeway freeway | = 1.3 | No fix listed |
| openfreeway freeway | = 1.3.0.142 | No fix listed |
| openfreeway freeway | = 1.3.1.142 | No fix listed |
| openfreeway freeway | = 1.3.1.147 | No fix listed |
| openfreeway freeway | = 1.3.2.154 | No fix listed |
| openfreeway freeway | = 1.3.2.160 | No fix listed |
| openfreeway freeway | = 1.3.2.160-joomla_beta | No fix listed |
| openfreeway freeway | = 1.4 | No fix listed |
| openfreeway freeway | = 1.4.0.171 | No fix listed |
| openfreeway freeway | = 1.4.1 | No fix listed |
| openfreeway freeway | = 1.4.1.171 | No fix listed |
| openfreeway freeway | = 1.4.1.197 | No fix listed |
References
- 32003 third-party-advisory vendor-advisory
- www.openfreeway.org
- 31508 vdb-entry
- freeway-multiple-sql-injection(45549) vdb-entry