Unrated severityNVD Advisory· Published Mar 18, 2009· Updated Apr 23, 2026

CVE-2008-6487

Description

Multiple SQL injection vulnerabilities in login.asp in Digiappz DigiAffiliate 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) admin and (2) password fields.

Affected products

Digiappz/Digiaffiliate
cpe:2.3:a:digiappz:digiaffiliate:*:*:*:*:*:*:*:*
Range: <=1.4

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/32217nvdExploit
www.vupen.com/english/advisories/2008/3068nvd
exchange.xforce.ibmcloud.com/vulnerabilities/46500nvd
www.exploit-db.com/exploits/7067nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000