CVE-2008-6366 SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password, possibly re...
HighCVSS 7.5
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password, possibly related to the uname and pass parameters to logon_process.jsp. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adserversolutions affiliate software java | = 4.0 | No fix listed |
References
- packetstorm.linuxsecurity.com exploit
- 33072 third-party-advisory vendor-advisory
- 32791 exploit vdb-entry
- affiliatesoftware-logon-sql-injection(47280) vdb-entry
- 7423 exploit