CVE-2008-4606

HIGH 7.5CVE-2008-4606 · Published 18/10/2008 · updated 16/06/2026

In short

CVE-2008-4606 is a HIGH (CVSS 7.5) vulnerability affecting ip reg (ip reg).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ip reg ip_reg	`= 0.3`	No fix yet

Description

Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) location_id parameter to locationdel.php and (2) vlan_id parameter to vlanedit.php. NOTE: the vlanview.php and vlandel.php vectors are already covered by CVE-2007-6579.

References

osvdb.org/show/osvdb/49231
osvdb.org/show/osvdb/49232
securityreason.com/securityalert/4435
securityfocus.com/bid/31781 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/45934
exploit-db.com/exploits/6765

More vulnerabilities in ip reg

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free