CVE-2008-6434 SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrary SQL commands via the LinkServID parameter.
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrary SQL commands via the LinkServID parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blueriver sava cms | <= 5.0 | No fix listed |
References
- holisticinfosec.org
- 45616 vdb-entry
- 30367 third-party-advisory vendor-advisory
- 29346 vdb-entry
- savacms-index-sql-injection(49225) vdb-entry