CVE-2008-6225 - CVE House
Back to Database
Status published High CVE-2008-6225

SQL injection vulnerability in info.php in Mole Group Airline Ticket...

Vulnerability Description

SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter. NOTE: the vendor has disputed this issue, stating "crazy hackers and so named Security companies [spread] out such false informations. Such scripts or versions [do not] exist.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-6225

Credits & Attribution

No credits recorded in the NVD database.

References

More from mole-group

View All →
CVE-2009-4675
admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script...
High 7.5
CVE-2009-4674
admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script...
High 7.5
CVE-2009-4673
SQL injection vulnerability in profile.php in Mole Group Adult Portal...
High 7.5
CVE-2008-6818
Mole Group Real Estate Script 1.1 and earlier stores passwords...
Medium 5
CVE-2008-6817
Mole Group Lastminute Script 4.0 and earlier stores passwords in...
Medium 5

Affected Vendor

Affected Software

airline ticket sale script
Vulnerable Versions:
Unknown

Timeline

Official Publish: February 20th, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.