CVE-2008-6487 Multiple SQL injection vulnerabilities in login.asp in Digiappz DigiAffiliate 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) admin and (2) password fields.
HighCVSS 7.5
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in login.asp in Digiappz DigiAffiliate 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) admin and (2) password fields.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| digiappz digiaffiliate | <= 1.4 | No fix listed |
References
- 32217 exploit vdb-entry
- ADV-2008-3068 vdb-entry
- digiaffiliate-login-sql-injection(46500) vdb-entry
- 7067 exploit