CVE-2008-6165: SQL injection vulnerability in gestion.php in CSPartner 0.1, when magic_quotes_gpc is disabled, allows remo...

Security readout for executives and security teams

CSPartner 0.1 has a reported SQL injection issue in gestion.php when PHP magic_quotes_gpc is disabled. A remote attacker may be able to manipulate database queries through login-related fields, risking data exposure or modification. The source bundle does not provide a CVSS score, patch status, or evidence of active exploitation. Exposure appears limited to internet- or intranet-reachable CSPartner 0.1 deployments where gestion.php is accessible and magic_quotes_gpc is disabled. The provided affected-product metadata is incomplete, so teams should verify by application inventory rather than broad platform assumptions. Prioritize if CSPartner is still used, especially on public-facing systems. SQL injection can affect confidentiality and integrity, but urgency cannot be fully scored from the bundle because severity, patch status, and active exploitation evidence are missing. Mitigation focus: Identify whether CSPartner 0.1 is deployed or externally reachable.; Check vendor or archive guidance for a fixed release or official workaround.; Remove public access to affected CSPartner instances pending remediation..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.