CVE-2008-6381

Bcoos < 1.0.13 - SQL Injection

Title source: rule

Description

SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute arbitrary SQL commands via the cid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by CWH Underground · perlwebappsphp

https://www.exploit-db.com/exploits/7317

View Code ZIP pw:eip

References (5)

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/46973

[Exploit] http://www.securityfocus.com/bid/32561

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/7317

[Third Party Advisory, VDB Entry] http://osvdb.org/50373

[Vendor Advisory] http://secunia.com/advisories/32870

Scores

EPSS 0.0026

EPSS Percentile 49.3%

Details

CWE

CWE-89

Status published

Products (5)

bcoos/bcoos 1.0.9

bcoos/bcoos 1.0.10

bcoos/bcoos 1.0.11

bcoos/bcoos 1.0.12

bcoos/bcoos < 1.0.13

Published Mar 02, 2009

Tracked Since Feb 18, 2026