CVE detail
CVE-2008-6227 — CVE-2008-6227
Published 2009-02-20 · Modified 2026-06-16 · Vendor preproject · Product pre_multi-vendor_shopping_malls · Source nvd
UNKNOWN
severity
CVSS-derived band
0.0097
EPSS probability
exploitation probability, 30d
58.0%
EPSS percentile
percentile vs all CVEs
NOT LISTED
CISA KEV
known exploited catalog
Description
SQL injection vulnerability in buyer_detail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the (1) sid and (2) cid parameters.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References