CVE-2008-6381: SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows r...

Security readout for executives and security teams

CVE-2008-6381 is an SQL injection issue in bcoos's Addresses module. An authenticated user with Addresses module permissions could manipulate a category request and affect the database. The bundle does not provide a CVSS score, patch version, or evidence of active exploitation. Exposure appears limited to organizations still running bcoos 1.0.13 or possibly earlier with the Addresses module enabled and accessible to authenticated users. Internet exposure depends on deployment and authentication controls, which are not described in the bundle. Prioritize if bcoos remains in production, especially on externally reachable systems. The issue can affect database integrity or confidentiality, but available evidence limits urgency because exploitation requires authentication and no active exploitation is cited. Mitigation focus: Check vendor or project guidance for a fixed bcoos release or patch.; Restrict Addresses module access to trusted authenticated users only.; Disable the Addresses module if it is unnecessary..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.