cbcvebase.
CVE-2008-6539
published 2009-03-30

CVE-2008-6539: Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary…

PriorityP334medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EXPLOIT
EPSS
2.24%
80.6th percentile
Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destar_cfg.py via a crafted pin parameter.

Affected

1 ranges
VendorProductVersion rangeFixed in
holger_schurigdestar
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.