CVE-2008-6366

no score yetEPSS 3.4%

SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password, possibly related to the uname and pass parameters to logon_process.jsp. NOTE: some of these details are obtained from third party information.

EPSS: 3.4% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2009-03-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

adserversolutions:affiliate_software_java

References

http://packetstorm.linuxsecurity.com/0812-exploits/affiliatesj-sql.txt
http://secunia.com/advisories/33072
http://www.securityfocus.com/bid/32791
https://exchange.xforce.ibmcloud.com/vulnerabilities/47280
https://www.exploit-db.com/exploits/7423

Check your stack JSON