high7.5Public exploit code
CVE-2008-6078
SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote attackers to execute arbitrary SQL command…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Limbo CMS - Private Messaging Component SQL Injection2008-10-21 · webapps · php · Verified
Impact
SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a pms action to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Limbo Cms | Com Privmsg | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/31837
- http://www.vupen.com/english/advisories/2008/2887
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45990
- https://www.exploit-db.com/exploits/6796
- http://www.securityfocus.com/bid/31837
- http://www.vupen.com/english/advisories/2008/2887
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45990
- https://www.exploit-db.com/exploits/6796