4.6
CVSSv2

CVE-2008-6381

Published: 02/03/2009 Updated: 29/09/2017
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 465
Vector: AV:N/AC:H/Au:S/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute arbitrary SQL commands via the cid parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

bcoos bcoos 1.0.11

bcoos bcoos 1.0.10

bcoos bcoos 1.0.9

bcoos bcoos

bcoos bcoos 1.0.12

Exploits

#!/usr/bin/perl -w #============================================ # bcoos 1013 Remote SQL Injection Exploit #============================================ # # ,--^----------,--------,-----,-------^--, # | ||||||||| `--------' | O CWH Underground Hacking Team # `+---------------------------^----------| # `\_,-------, _____ ...