Key Information Summary Vulnerability Description: Libera CMS <= 1.12 (Cookie) Remote SQL Injection Exploit, allowing attackers to add an administrator account via SQL injection. Risk Level: Medium CVE ID: CVE-2008-4700 CWE ID: CWE-89 CVSS Score: - Base Score: 6.8/10 - Requires External Access: Yes - Remoteness: Yes - Authentication Required: No Impact Score: - Confidentiality Impact: Partial - Integrity Impact: Partial - Availability Impact: Partial Exploitability Score: - Attack Complexity: Medium - Exploitability Subscore: 8.6/10 - Attack Vector: Remote - Access Complexity: Medium Exploit Script Reference Links Xforce Securityfocus MILW0RM Secunia