6
CVSSv2

CVE-2008-6383

Published: 02/03/2009 Updated: 17/08/2017
CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8
VMScore: 534
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x prior to 5.x-1.14 and 6.x prior to 6.x-1.18, a module for Drupal, allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

drupal storm 5.x-1.13

drupal storm 5.x-1.7

drupal storm 5.x-1.4

drupal storm 6.x-1.16

drupal storm 6.x-1.15

drupal storm 6.x-1.14

drupal storm 6.x-1.7

drupal storm 6.x-1.8

drupal storm 6.x-1.x-dev

drupal storm 5.x-1.12

drupal storm 5.x-1.11

drupal storm 5.x-1.5

drupal storm 5.x-1.3

drupal storm 6.x-1.13

drupal storm 6.x-1.12

drupal storm 6.x-1.4

drupal storm 6.x-1.5

drupal storm 5.x-1.8

drupal storm 5.x-1.6

drupal storm 5.x-1.x-dev

drupal storm 6.x-1.17

drupal storm 6.x-1.9

drupal storm 6.x-1.6

drupal storm 6.x-1.1

drupal storm 6.x-1.0

drupal storm 5.x-1.9

drupal storm 5.x-1.10

drupal storm 5.x-1.2

drupal storm 5.x-1.1

drupal storm 6.x-1.11

drupal storm 6.x-1.10

drupal storm 6.x-1.3

drupal storm 6.x-1.2