CVE-2008-6627 SQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webbdomain webshop | <= 1.2 | No fix listed |
| webbdomain webshop | = 1.1 | No fix listed |
| webbdomain webshop | = 1.02 | No fix listed |
References
- 49720 vdb-entry
- 32499 third-party-advisory vendor-advisory
- 32108 vdb-entry
- webshop-getin-sql-injection(46357) vdb-entry
- 6986 exploit