CVE-2008-6941
SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory...
CVE-2008-6941 is a high vulnerability (CVSS 7.5) in Turnkeyforms Web Hosting Directory, published August 12, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.14%, the 66th percentile. No source names a fixed version.
SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field.
Exploit likelihood
What each source reports
NVD Score used
SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field.
- Record
CVE-2008-6941- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field.
- Record
CVE-2008-6941- Updated
- 2026-11-02
EUVDEUVD-2008-6901 No score
SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field.
- Record
EUVD-2008-6901- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2476-f5h7-4c25 No score
SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory...
SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field.
- Record
GHSA-2476-f5h7-4c25- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | TurnkeyForms Web Hosting Directory - Multiple Vulnerabilities | 2008-11-12 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |