CVE-2008-2688 - CVE House
Back to Database
Status published High CVE-2008-2688

SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3...

Vulnerability Description

SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-2688

Credits & Attribution

No credits recorded in the NVD database.

References

More from pilotcart

View All →
CVE-2010-4872
SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3...
High 7.5
CVE-2010-4632
Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow...
High 7.5
CVE-2010-4631
Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3...
Medium 4.3

Affected Vendor

Affected Software

pilot cart
Vulnerable Versions:
7.3

Timeline

Official Publish: June 13th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.