CVE-2008-6160

MITTEL 5.0CVE-2008-6160 · Published 18/02/2009 · updated 16/06/2026

Kurz gesagt

CVE-2008-6160 ist eine Schwachstelle (MITTEL (CVSS 5.0)) in semantically interconnected online communities (drupal).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.9%, höher als bei 79.7% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
semantically interconnected online communities drupal	`≤ 5.x_1.0≤ 6.x_1.0`	No fix yet

Description

Semantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly implement menu and database APIs, which allows remote attackers to obtain usernames and read hashed emails and comments via unspecified vectors.

References

drupal.org/node/318749 · Patch
secunia.com/advisories/32191 · Vendor Advisory
securityfocus.com/bid/31658
exchange.xforce.ibmcloud.com/vulnerabilities/45762

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free