CVE-2008-6381 | BDVDB-2026-35328 Detail

Description#

SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute arbitrary SQL commands via the cid parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/46973
http://www.securityfocus.com/bid/32561
https://www.exploit-db.com/exploits/7317
http://osvdb.org/50373
http://secunia.com/advisories/32870

Exploit#

https://www.exploit-db.com/exploits/7317

History#

Version 12009-03-02Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.