CVE-2008-6383 - SQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module for Drupal, allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors

Back Back to CVE browser

MEDIUM

SQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module for Drupal, allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors

Published Mar 2, 2009

6.0

MEDIUM

CVSS 2.0

EPSS 0.85%

Description

SQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module for Drupal, allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

http://drupal.org/node/342246
x_refsource_CONFIRMPatchVendor Advisory
http://secunia.com/advisories/32978
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/32626
vdb-entryx_refsource_BIDPatch
https://exchange.xforce.ibmcloud.com/vulnerabilities/47077
vdb-entryx_refsource_XF

Link	Providers	Tags
http://drupal.org/node/342246		x_refsource_CONFIRMPatchVendor Advisory
http://secunia.com/advisories/32978		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/32626		vdb-entryx_refsource_BIDPatch
https://exchange.xforce.ibmcloud.com/vulnerabilities/47077		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 2, 2009

Updated Aug 7, 2024

Reserved Mar 2, 2009

Link CVE-2008-6383

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-6383

Red Hat

Severity n/a

Public date n/a

Links CVE-2008-6383