CVE-2008-6641 | BDVDB-2026-35971 Detail

Description#

Multiple SQL injection vulnerabilities in Shader TV (Beta) allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to (1) kanal.asp, (2) google.asp, and (3) hakk.asp in yonet/; and allow remote attackers to execute arbitrary SQL commands via the (4) username or (5) password fields to yonet/default.asp.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/5564
http://www.securityfocus.com/bid/29091
https://exchange.xforce.ibmcloud.com/vulnerabilities/42261

Exploit#

https://www.exploit-db.com/exploits/5564

History#

Version 12009-04-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.