CVE-2008-6641

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-04-07 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in Shader TV (Beta) allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to (1) kanal.asp, (2) google.asp, and (3) hakk.asp in yonet/; and allow remote attackers to execute arbitrary SQL commands via the (4) username or (5) password fields to yonet/default.asp.

Affected products

Aspindir Shader Tv: all versions

References

http://www.securityfocus.com/bid/29091
https://exchange.xforce.ibmcloud.com/vulnerabilities/42261
https://www.exploit-db.com/exploits/5564
http://www.securityfocus.com/bid/29091
https://exchange.xforce.ibmcloud.com/vulnerabilities/42261
https://www.exploit-db.com/exploits/5564

Get alerted when CVE-2008-6641 or the next vulnerability affects your stack