CVE-2008-6160

MEDIO 5.0CVE-2008-6160 · Published 18/02/2009 · updated 16/06/2026

En resumen

CVE-2008-6160 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a semantically interconnected online communities (drupal).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.9%, mayor que el 79.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
semantically interconnected online communities drupal	`≤ 5.x_1.0≤ 6.x_1.0`	No fix yet

Description

Semantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly implement menu and database APIs, which allows remote attackers to obtain usernames and read hashed emails and comments via unspecified vectors.

References

drupal.org/node/318749 · Patch
secunia.com/advisories/32191 · Vendor Advisory
securityfocus.com/bid/31658
exchange.xforce.ibmcloud.com/vulnerabilities/45762

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free