CVE-2008-6236

SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2009-02-21

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Simple Document Management System (Cafuego)

References

• http://secunia.com/advisories/32502
• http://www.securityfocus.com/bid/32114
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46342
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48944