CVE-2008-6119 describes a static code injection vulnerability in Goople CMS version 1.7. Specifically, the admin/account/action/editpass.php file allows remote attackers to inject arbitrary PHP code into admin/userandpass.php through the username and password parameters. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing for complete compromise of confidentiality, integrity, and availability with low attack complexity and no authentication required. While there is an ExploitDB entry for "Insecure Cookie Handling" related to Goople CMS 1.7, there is no direct exploit intelligence for CVE-2008-6119 itself, and it lacks active exploitation, Metasploit/Nuclei modules, or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.7CPE matchmatch criteria | cpe:2.3:a:goople_cms:goople_cms:1.7:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.