CVE-2008-6026

Description

SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

• bluecube / bluecube_cms

References

• MISChttp://www.securityfocus.com/bid/31323
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/45322
• VENDOR_ADVISORYhttp://secunia.com/advisories/31967
• MISChttp://packetstorm.linuxsecurity.com/0809-exploits/bluecube.txt