7.5
CVSSv2

CVE-2008-6289

Published: 26/02/2009 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote malicious users to execute arbitrary SQL commands via the cityid parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

toursmanager tours manager 1.0

Exploits

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tours Manager v1 (cityviewphp cityid) SQL Injection Vulnerability -=-=-=-=-=-=-=-=- ...