CVE Daily

CVE-2008-5586

SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Ch...

Medium CVSS 6.8

Overview

SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter.

CWE: CWE-89 Published: 2008-12-16T19:07:31.813
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.8 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags