Skip to content

CVE-2008-6471 SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a show action.

HighCVSS 7.5 EPSS 1.00%
Published
Updated
Exploit status
No public exploit known

Description

SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a show action.

Affected products

ProductAffected versionsFixed in
mountaingrafix easylink = 1.1.0 No fix listed

References

  • 48395 vdb-entry
  • 31957 third-party-advisory vendor-advisory
  • 6494 exploit