Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2008-1613

SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter.

Published: Apr 22, 2008
Updated: Nov 9, 2025
CVE: CVE-2008-1613
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
reddot / cms	6.5	6.5.x
reddot / cms	7.5-build_7.5.0.48	7.5-build_7.5.0.48.x
reddot / cms	7.0	7.0.x

http://secunia.com/advisories/29843
http://www.irmplc.com/index.php/167-Advisory-026
http://www.securityfocus.com/archive/1/491139/100/0/threaded
http://www.securityfocus.com/bid/28872
https://exchange.xforce.ibmcloud.com/vulnerabilities/41924
https://www.exploit-db.com/exploits/5482

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo