{"api_version":"1","generated_at":"2026-07-23T09:55:49+00:00","cve":"CVE-2008-1613","urls":{"html":"https://cve.report/CVE-2008-1613","api":"https://cve.report/api/cve/CVE-2008-1613.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-1613","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-1613"},"summary":{"title":"CVE-2008-1613","description":"SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-04-22 04:41:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-89","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://www.exploit-db.com/exploits/5482","name":"https://www.exploit-db.com/exploits/5482","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"RedDot CMS 7.5 (LngId) Remote SQL Injection Exploit","mime":"text/x-python","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41924","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41924","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.irmplc.com/index.php/167-Advisory-026","name":"http://www.irmplc.com/index.php/167-Advisory-026","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Advisory 026  » RedDot CMS SQL injection vulnerability  » IRM - Information Risk Management Plc","mime":"text/xml","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/29843","name":"http://secunia.com/advisories/29843","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"RedDot CMS \"LngId\" SQL Injection Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/491139/100/0/threaded","name":"http://www.securityfocus.com/archive/1/491139/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/28872","name":"http://www.securityfocus.com/bid/28872","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"RedDot CMS 'ioRD.asp' SQL Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-1613","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1613","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"1613","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"reddot","cpe5":"cms","cpe6":"6.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1613","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"reddot","cpe5":"cms","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1613","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"reddot","cpe5":"cms","cpe6":"7.5","cpe7":"build_7.5.0.48","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T08:24:42.863Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"5482","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/5482"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.irmplc.com/index.php/167-Advisory-026"},{"name":"20080421 IRM Security Advisory : RedDot CMS SQL injection vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/491139/100/0/threaded"},{"name":"29843","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/29843"},{"name":"28872","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/28872"},{"name":"reddot-iord-sql-injection(41924)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41924"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-04-21T00:00:00.000Z","descriptions":[{"lang":"en","value":"SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-11T19:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"5482","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/5482"},{"tags":["x_refsource_MISC"],"url":"http://www.irmplc.com/index.php/167-Advisory-026"},{"name":"20080421 IRM Security Advisory : RedDot CMS SQL injection vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/491139/100/0/threaded"},{"name":"29843","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/29843"},{"name":"28872","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/28872"},{"name":"reddot-iord-sql-injection(41924)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41924"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-1613","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"5482","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/5482"},{"name":"http://www.irmplc.com/index.php/167-Advisory-026","refsource":"MISC","url":"http://www.irmplc.com/index.php/167-Advisory-026"},{"name":"20080421 IRM Security Advisory : RedDot CMS SQL injection vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/491139/100/0/threaded"},{"name":"29843","refsource":"SECUNIA","url":"http://secunia.com/advisories/29843"},{"name":"28872","refsource":"BID","url":"http://www.securityfocus.com/bid/28872"},{"name":"reddot-iord-sql-injection(41924)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41924"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-1613","datePublished":"2008-04-21T20:00:00.000Z","dateReserved":"2008-04-02T00:00:00.000Z","dateUpdated":"2024-08-07T08:24:42.863Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-04-22 04:41:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-89","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:reddot:cms:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9625E4A6-4BD9-4BB9-B766-343FB936EED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:reddot:cms:7.0:*:*:*:*:*:*:*","matchCriteriaId":"7CBA2389-D719-4FC3-82E9-25D53744DB25"},{"vulnerable":true,"criteria":"cpe:2.3:a:reddot:cms:7.5:build_7.5.0.48:*:*:*:*:*:*","matchCriteriaId":"ECC6FE8B-66CE-49BD-92E3-1C3034D7073C"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"1613","Ordinal":"1","Title":"CVE-2008-1613","CVE":"CVE-2008-1613","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"1613","Ordinal":"1","NoteData":"SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter.","Type":"Description","Title":"CVE-2008-1613"},{"CveYear":"2008","CveId":"1613","Ordinal":"2","NoteData":"2008-04-21","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"1613","Ordinal":"3","NoteData":"2018-10-11","Type":"Other","Title":"Modified"}]}}}