CVE-2008-0142 — MEDIUM (6.8)

Vulnerability Description

Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL commands via the user_name parameter to actions.php, and unspecified other vectors.

CVSS Score

6.8

MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Webportal	Webportal Cms	0.6_beta

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2008-0142?

CVE-2008-0142 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL commands via the user_name parameter to actions.php, and unspecified other vectors.

How severe is CVE-2008-0142?

CVE-2008-0142 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2008-0142?

Check the references section above for vendor advisories and patch information. Affected products include: Webportal Webportal Cms.