Unscored CVE-2008-6434 EUVD-2008-6404GHSA-q8p3-qw5q-3fpf

SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitra…

Published Mar 6, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrary SQL commands via the LinkServID parameter.

References

29346 vdb-entry
30367 third-party-advisory
45616 vdb-entry
savacms-index-sql-injection(49225) vdb-entry
http://holisticinfosec.org/content/view/67/45/