CVE-2008-6527 - SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the iFor parameter

HIGH

SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the iFor parameter

Published Mar 25, 2009

7.5

HIGH

CVSS 2.0

EPSS 1.10%

SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the iFor parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://www.securityfocus.com/bid/32066		vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/46514		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/6930		exploitx_refsource_EXPLOIT-DB

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Mar 25, 2009

Updated Aug 7, 2024

Reserved Mar 25, 2009

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a