VULNERABILITY INTELLIGENCE

CVE-2008-6889

CVSS score7.5 HIGH

EPSS probability1.00%

CISA KEVNot currently listed

Published2009-08-03

Last modified2026-06-16

Description

SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter.