CVE-2008-4487
CVE-2008-4487 describes a SQL injection vulnerability in the ap-save.php component of Atarone CMS version 1.2.0. This flaw allows remote attackers to execute arbitrary SQL commands by manipulating various parameters such as site_name, email, and theme_chosen. The vulnerability has a CVSS score of 6.8, indicating a medium severity, with a network attack vector, medium access complexity, and potential for partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
Impacted Technologies
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.2.0CPE matchmatch criteria | cpe:2.3:a:atarone:atarone:1.2.0:*:*:*:*:*:*:* |
CVSS Data
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploit Intelligence
Social Chatter
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
Media Mentions
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation
Remediation records are not available for this CVE.