7.5
CVSSv2

CVE-2008-4606

Published: 18/10/2008 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple SQL injection vulnerabilities in IP Reg 0.4 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) location_id parameter to locationdel.php and (2) vlan_id parameter to vlanedit.php. NOTE: the vlanview.php and vlandel.php vectors are already covered by CVE-2007-6579.

Vulnerable Product Search on Vulmon Subscribe to Product

ip reg ip reg 0.3

Exploits

# IP Reg <= 04 Multiple Remote SQL Injection Vulnerabilities # url: sourceforgenet/projects/ipreg/ # # Author: JosS # mail: sys-project[at]hotmail[dot]com # site: spanish-hackerscom # team: Spanish Hackers Team - [SHT] # # This was written for educational purpose Use it at your own risk # Author will be not responsible for any ...