high7.5Public exploit code
CVE-2008-6202
SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) urun.asp, (2) admin/bayi_listel…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cobalt 0.1 - Multiple SQL Injections2008-04-05 · webapps · asp · Verified
Impact
SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) urun.asp, (2) admin/bayi_listele.asp, (3) admin/urun_grup_listele.asp, and (4) admin/urun_listele.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jakob-Persson | Cobalt | Version 1.0 |