{"id":"CVE-2008-1613","aliases":["EUVD-2008-1614","GHSA-rhj6-8m2c-87ch"],"status":"published","title":"SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other...","description":"SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.07534,"percentile":0.94546,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-89"],"published":"2008-04-21T20:00:00Z","modified":"2026-06-16T22:52:06Z","exploits":[{"source":"exploitdb","id":"EDB-5482","title":"RedDot CMS 7.5 - 'LngId' SQL Injection","type":"webapps","platform":"asp","date":"2008-04-21","verified":true,"url":"https://www.exploit-db.com/exploits/5482"},{"source":"pocgithub","id":"SECFORCE/CVE-2008-1613","title":"SECFORCE/CVE-2008-1613","date":"2017-05-03","url":"https://github.com/SECFORCE/CVE-2008-1613"}],"products":[{"vendor":"reddot","product":"cms"}],"references":[{"url":"https://www.exploit-db.com/exploits/5482","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://www.irmplc.com/index.php/167-Advisory-026","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/491139/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/29843","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/28872","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41924","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1613"},{"url":"https://github.com/advisories/GHSA-rhj6-8m2c-87ch"}],"sources":{"cve":[{"id":"CVE-2008-1613","description":"SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter.","status":"published","published":"2008-04-21T20:00:00Z","modified":"2024-08-07T08:24:42.863Z","updated_at":"2026-11-02T14:34:47.71012Z"}],"euvd":[{"id":"EUVD-2008-1614","description":"SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter.","status":"published","published":"2008-04-21T20:00:00Z","modified":"2024-08-07T08:24:42Z","updated_at":"2026-11-03T01:39:00.729717Z"}],"ghsa":[{"id":"GHSA-rhj6-8m2c-87ch","title":"SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other...","description":"SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter.","status":"published","published":"2022-05-01T23:41:50Z","modified":"2023-01-31T05:05:48Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:48:55.276152Z"}],"nvd":[{"id":"CVE-2008-1613","description":"SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter.","status":"published","published":"2008-04-22T04:41:00Z","modified":"2026-06-16T22:52:06.093Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:01:26.27008Z"}]}}