CVE-2008-0232 Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to index.php, or the (2) f or t parameters to forums/inde...
HighCVSS 7.5
EPSS 0.97%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to index.php, or the (2) f or t parameters to forums/index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zero cms | = 1.0_alpha | No fix listed |
References
- packetstormsecurity.org exploit
- 27186 exploit vdb-entry
- zerocms-index-sql-injection(39530) vdb-entry
- 4864 exploit