CVE-2008-4518

EUVD-2008-4499
Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d (1.9999 d) allow remote attackers to execute arbitrary SQL commands via the (1) sprache parameter to index2.php and the (2) artikel parameter to index.php.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
Affected Products (NVD)
VendorProductVersion
fastpublishfastpublish_cms
1.9.9.9.9d:d
fastpublishfastpublish_cms
1.9999d:d
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/32126
http://securityreason.com/securityalert/4383
http://www.securityfocus.com/bid/31582
https://exchange.xforce.ibmcloud.com/vulnerabilities/45671
https://www.exploit-db.com/exploits/6678
http://secunia.com/advisories/32126
http://securityreason.com/securityalert/4383
http://www.securityfocus.com/bid/31582
https://exchange.xforce.ibmcloud.com/vulnerabilities/45671
https://www.exploit-db.com/exploits/6678