CVE-2008-6383

SQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module for Drupal, allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors.

• CWE-89

• http://drupal.org/node/342246Patch, Vendor Advisory
• http://secunia.com/advisories/32978Vendor Advisory
• http://www.securityfocus.com/bid/32626Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47077
• http://drupal.org/node/342246Patch, Vendor Advisory
• http://secunia.com/advisories/32978Vendor Advisory
• http://www.securityfocus.com/bid/32626Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47077

Published

Mar 2, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-6377PHP remote file inclusion vulnerability in include/global.ph…
• CVE-2008-6378SQL injection vulnerability in calendar_Eventupdate.asp in C…
• CVE-2008-6379SQL injection vulnerability in pics_pre.asp in Gallery MX 2.…
• CVE-2008-6380SQL injection vulnerability in default.aspx in Active Web He…
• CVE-2008-6381SQL injection vulnerability in modules/adresses/viewcat.php …
• CVE-2008-6382ASP Portal 3.2.5 stores sensitive information under the web …
• CVE-2008-6384Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2008-6385Cross-site scripting (XSS) vulnerability in index.php in W3m…
• CVE-2008-6386Cross-site scripting (XSS) vulnerability in showads.php in Z…
• CVE-2008-6387Quick Tree View .NET 3.1 stores sensitive information under …
• CVE-2008-6388Rapid Classified 3.1 and 3.15 stores sensitive information u…
• CVE-2008-6389SQL injection vulnerability in asadmin/default.asp in Rae Me…