peter bassill · operator
$ cve CVE-2008-6674 JSON

CVE-2008-6674 EXPLOIT

5.0
MEDIUM · CVSS 2.0 · EPSS 2.7% (pctl 86)

Patch early

A public exploit exists.

Description

mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of requests with a modified sEmail parameter.

Scoring

CVSS5.0 (MEDIUM, v2.0)
VectorAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS2.73% — more likely to be exploited than 86% of all CVEs
WeaknessCWE-264
On CISA KEVno
Public exploityes
Published2009-04-08
Last modified2026-06-16

Affected (1)

VendorProduct
quickersitequickersite

Public exploits

SourceTitleDate
exploit-dbQuickerSite 1.8.5 - Multiple Vulnerabilities2008-06-03

References

→ the Explorer  ·  watch your stack  ·  NVD