CVE-2008-6081 - SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter

HIGH

SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter

Published Feb 6, 2009

7.5

HIGH

CVSS 2.0

EPSS 1.10%

SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://www.securityfocus.com/bid/28852		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-6051		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41938		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/5468		exploitx_refsource_EXPLOIT-DB

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 6, 2009

Updated Aug 7, 2024

Reserved Feb 5, 2009

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Feb 6, 2009

Updated Aug 7, 2024

GitHub

No data