CVE-2008-6156

2009-02-1618:00:00

mitre

www.cve.org

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

23.8%

JSON

SQL injection vulnerability in editCampaign.php in AdMan 1.1.20070907 allows remote authenticated users to execute arbitrary SQL commands via the campaignId parameter.

References

secunia.com/advisories/32160

www.securityfocus.com/bid/31646

exchange.xforce.ibmcloud.com/vulnerabilities/45768

www.exploit-db.com/exploits/6702