CVE-2008-6013
Estado: ModificadaAlta (7.5)—
Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to execute arbitrary SQL commands via unspecified vectors involving the (1) advanced search result and (2) service resource pages.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.06%
- Percentil entre todas las CVEs puntuadas: 64
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-89
Referencias
- http://secunia.com/advisories/32003
- http://www.openfreeway.org/download/change-log.html
- http://www.securityfocus.com/bid/31508
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45549
- http://secunia.com/advisories/32003
- http://www.openfreeway.org/download/change-log.html
- http://www.securityfocus.com/bid/31508
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45549
JSON original (NVD)
Mostrar
{
"id": "CVE-2008-6013",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2009-01-30T18:30:05.297",
"references": [
{
"url": "http://secunia.com/advisories/32003",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.openfreeway.org/download/change-log.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/31508",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45549",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/32003",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openfreeway.org/download/change-log.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/31508",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45549",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to execute arbitrary SQL commands via unspecified vectors involving the (1) advanced search result and (2) service resource pages."
},
{
"lang": "es",
"value": "Múltiples vulnerabilidades de inyección de SQL en versiones de Freeway anteriores a la 1.4.3.210 permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados que involucran (1) los resultados de la búsqueda avanzada y (2) las páginas de recursos del servicio."
}
],
"lastModified": "2026-06-16T23:01:24.753",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:openfreeway:freeway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D874DF27-1D7B-4C21-9BFF-26016381B90E",
"versionEndIncluding": "1.4.2.197"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.0.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4F4745B-C28B-46A1-BE7B-A49E9BB7B774"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.0.25:public_beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17965A1F-4CBD-4206-B65F-FDC91FF0E361"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.0.59:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "161E864D-0036-4D35-BE17-01915B6D44EF"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.0.060:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83EE7EB8-F131-4997-A885-572A7D157699"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.1.1.76:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67B25AC3-F11E-47DE-9D67-C539954BE09E"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.1.1.80:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62BFA63A-33E7-4407-B356-85D3A444DD59"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.1.1.81:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57922480-AA78-4EC3-95A9-42C03E3FCBD0"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.2.0.113:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A908306D-D797-4F03-BE1F-F3589ADC4A36"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0333462E-0920-4EA7-ABEF-ED61183DBD4B"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.3.0.142:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2506D84-CA57-473C-9607-B7682EC7C60B"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.3.1.142:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7EF9069-4B41-42B6-B0BF-B97743D06153"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.3.1.147:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D715EFE-2E15-46BC-8CB8-F69304A64509"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.3.2.154:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3512E21-A237-4B17-A4FC-E915B9E858BE"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.3.2.160:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D31BAE6B-A9E7-4B9C-8665-D64BD6A2817C"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.3.2.160:joomla_beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "219D55DC-19CA-43AE-A578-5C803CC2A3F4"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61873769-7768-4CFC-B539-B5E7A4F1C79C"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.4.0.171:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A18B733-8855-4EA6-864F-3A3099FC12CC"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B03F703-ACF9-4A61-95D0-AF5253FF3085"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.4.1.171:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C74596B7-B092-4FC9-B6C0-0A2877E81420"
},
{
"criteria": "cpe:2.3:a:openfreeway:freeway:1.4.1.197:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACB43C45-757B-446F-9133-5C1031791312"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}