← Database

CVE-2008-6950

HIGH CVSS: 7.5 Published: 2009-08-12 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in login.asp in Bankoi WebHosting Control Panel 1.20 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field.

Affected Platforms

Webhost-Panel Bankoi Webhosting Control Panel

Weakness Type

CWE-89

References