CVE-2008-6678 SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via the sNickName parameter in a profile action to default.asp.
HighCVSS 7.5
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via the sNickName parameter in a profile action to default.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| quickersite | = 1.8.5 | No fix listed |
References
- 46228 vdb-entry
- 30501 third-party-advisory vendor-advisory
- www.bugreport.ir
- www.bugreport.ir
- 29524 vdb-entry
- quickersite-snickname-sql-injection(42866) vdb-entry