ByteOS Network

NVD Vulnerability Details :

CVE-2008-6013

Modified

Source-cve@mitre.org

Published At-30 Jan, 2009 | 18:30

Updated At-08 Aug, 2017 | 01:33

Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to execute arbitrary SQL commands via unspecified vectors involving the (1) advanced search result and (2) service resource pages.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

openfreeway>>freeway>>Versions up to 1.4.2.197(inclusive)

cpe:2.3:a:openfreeway:freeway:*:*:*:*:*:*:*:*

openfreeway>>freeway>>1.0.25

cpe:2.3:a:openfreeway:freeway:1.0.25:*:*:*:*:*:*:*

openfreeway>>freeway>>1.0.25

cpe:2.3:a:openfreeway:freeway:1.0.25:public_beta:*:*:*:*:*:*

openfreeway>>freeway>>1.0.59

cpe:2.3:a:openfreeway:freeway:1.0.59:*:*:*:*:*:*:*

openfreeway>>freeway>>1.0.060

cpe:2.3:a:openfreeway:freeway:1.0.060:*:*:*:*:*:*:*

openfreeway>>freeway>>1.1.1.76

cpe:2.3:a:openfreeway:freeway:1.1.1.76:*:*:*:*:*:*:*

openfreeway>>freeway>>1.1.1.80

cpe:2.3:a:openfreeway:freeway:1.1.1.80:*:*:*:*:*:*:*

openfreeway>>freeway>>1.1.1.81

cpe:2.3:a:openfreeway:freeway:1.1.1.81:*:*:*:*:*:*:*

openfreeway>>freeway>>1.2.0.113

cpe:2.3:a:openfreeway:freeway:1.2.0.113:*:*:*:*:*:*:*

openfreeway>>freeway>>1.3

cpe:2.3:a:openfreeway:freeway:1.3:*:*:*:*:*:*:*

openfreeway>>freeway>>1.3.0.142

cpe:2.3:a:openfreeway:freeway:1.3.0.142:*:*:*:*:*:*:*

openfreeway>>freeway>>1.3.1.142

cpe:2.3:a:openfreeway:freeway:1.3.1.142:*:*:*:*:*:*:*

openfreeway>>freeway>>1.3.1.147

cpe:2.3:a:openfreeway:freeway:1.3.1.147:*:*:*:*:*:*:*

openfreeway>>freeway>>1.3.2.154

cpe:2.3:a:openfreeway:freeway:1.3.2.154:*:*:*:*:*:*:*

openfreeway>>freeway>>1.3.2.160

cpe:2.3:a:openfreeway:freeway:1.3.2.160:*:*:*:*:*:*:*

openfreeway>>freeway>>1.3.2.160

cpe:2.3:a:openfreeway:freeway:1.3.2.160:joomla_beta:*:*:*:*:*:*

openfreeway>>freeway>>1.4

cpe:2.3:a:openfreeway:freeway:1.4:*:*:*:*:*:*:*

openfreeway>>freeway>>1.4.0.171

cpe:2.3:a:openfreeway:freeway:1.4.0.171:*:*:*:*:*:*:*

openfreeway>>freeway>>1.4.1

cpe:2.3:a:openfreeway:freeway:1.4.1:*:*:*:*:*:*:*

openfreeway>>freeway>>1.4.1.171

cpe:2.3:a:openfreeway:freeway:1.4.1.171:*:*:*:*:*:*:*

openfreeway>>freeway>>1.4.1.197

cpe:2.3:a:openfreeway:freeway:1.4.1.197:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-89	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/32003	cve@mitre.org	Vendor Advisory
http://www.openfreeway.org/download/change-log.html	cve@mitre.org	N/A
http://www.securityfocus.com/bid/31508	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/45549	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History