← Database

CVE-2008-6434

HIGH CVSS: 7.5 Published: 2009-03-06 Modified: 2026-06-16

Description

SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrary SQL commands via the LinkServID parameter.

Affected Platforms

Blueriver Sava Cms

Weakness Type

CWE-89

References