CVE-2008-2870 Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the (1) eventID parameter to event_info.php and the (2) userID parameter to lis...
HighCVSS 7.5
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the (1) eventID parameter to event_info.php and the (2) userID parameter to list_user.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sharecms | = 0.1-beta | No fix listed |
References
- 29916 exploit vdb-entry
- ADV-2008-1925 vdb-entry
- sharecms-eventid-userid-sql-injection(43318) vdb-entry
- 5925 exploit