Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.5
CVSSv2

CVE-2008-6282

Published: 25/02/2009 Updated: 29/09/2017
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
VMScore: 655
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in engine/users/users_edit_pub.inc in CMS Ortus 1.13 and previous versions allows remote authenticated users to execute arbitrary SQL commands via the city parameter in a users_edit_pub action to index.php.

Vulnerable Product Search on Vulmon Subscribe to Product

ortus.nirn cms ortus 1.12

ortus.nirn cms ortus 1.11

ortus.nirn cms ortus

ortus.nirn cms ortus 1.10.1

Exploits

Exploit DB: CMS Ortus 1.13 - SQL Injection
Author: otmorozok428, forumantichatru Products: CMS Ortus 112, CMS Ortus 113 Vendor: ortusnirnru Download: ortusnirnru/files/ortus1-12zip, ortusnirnru/files/ortus1-13zip Dork (for ALL Versions of CMS Ortus): inurl:indexphp?ortupg= SQL Injection Vulnerability in POST Form: wwwsitecom/indexp ...

References

CWE-89http://osvdb.org/50312http://secunia.com/advisories/32899http://ortus.nirn.ru/index.php?ortupg=16http://www.vupen.com/english/advisories/2008/3272http://www.securityfocus.com/bid/32486https://exchange.xforce.ibmcloud.com/vulnerabilities/46886https://www.exploit-db.com/exploits/7237https://nvd.nist.govhttps://www.exploit-db.com/exploits/7237/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23316SQL injectiontype confusionCVE-2024-20697CVE-2024-4344localCVE-2024-30043CVE-2024-3821CVE-2024-5041
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook