CVE-2008-6326: Simplecustomer Simple Customer

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in login.php in Simple Customer as downloaded on 20081118 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• Simplecustomer Simple Customer: affected versions not specified

Published 2009-02-27. Last modified 2026-06-16.