CVE-2008-6013

Freeway < 1.4.3.210 - SQL Injection via Advanced Search and Service Resource Pages

Title source: llm
STIX 2.1

Description

Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to execute arbitrary SQL commands via unspecified vectors involving the (1) advanced search result and (2) service resource pages.

References (4)

Core 4
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32003
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/45549
Various Sources x_refsource_confirm
http://www.openfreeway.org/download/change-log.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/31508

Scores

EPSS 0.0106
EPSS Percentile 61.2%

Details

CWE
CWE-89
Status published
Products (19)
openfreeway/freeway 1.0.25 (2 CPE variants)
openfreeway/freeway 1.0.59
openfreeway/freeway 1.0.060
openfreeway/freeway 1.1.1.76
openfreeway/freeway 1.1.1.80
openfreeway/freeway 1.1.1.81
openfreeway/freeway 1.2.0.113
openfreeway/freeway 1.3
openfreeway/freeway 1.3.0.142
openfreeway/freeway 1.3.1.142
... and 9 more
Published Jan 30, 2009
Tracked Since Feb 18, 2026