CVE-2008-5589

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the (1) txtusername parameter (aka username field) or the (2) txtpassword parameter (aka password field). NOTE: some of these details are obtained from third party information.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Dec 16, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-55907.5SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to execu CVE-2008-55914.3Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject arbitrary web script CVE-2008-55925.0Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers CVE-2008-55937.5Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execute arbitrary local fi CVE-2008-55947.5Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and execute arbitrary local f CVE-2008-55957.5SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter.CVE-2008-55965.0Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attacke CVE-2008-55975.0Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the dat CVE-2008-55985.0Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a .. (dot CVE-2008-55997.5SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the passw CVE-2008-56005.0Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to do CVE-2008-56015.0User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to down