CVE-2008-6950

CVE-2008-6950 describes multiple SQL injection vulnerabilities in the login.asp component of Bankoi WebHosting Control Panel version 1.20. Attackers can exploit these flaws by injecting malicious SQL commands into the username or password fields, potentially leading to authentication bypass and arbitrary SQL command execution. This vulnerability has a CVSS score of 7.5 (High), indicating a critical risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, an exploit for authentication bypass is publicly available on ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.