CVE-2008-1613

RedDot CMS (ioRD.asp) is vulnerable to a pre-authentication SQL injection via the LngId parameter. The issue, present in RedDot CMS 7.5 Build 7.5.0.48 and potentially in 6.5 and 7.0, arises from inadequate validation of LngId, allowing remote attackers to execute arbitrary SQL and enumerate datab...

CVE-2008-1613

creationtimestamp| type| source ---|---|--- 2008-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5482...

reddot-sql.txt

RedDot CMS SQL injection vulnerability CVE Number: CVE-2008-1613 http://www.irmplc.com/index.php/167-Advisory-026 Vulnerability Type/Importance: SQL injection/Critical Problem Discovered: 12 February 2008 Vendor Contacted: 19 February 2008 Advisory Published: 21 April 2008 Abstract: The RedDot CM...