CVE-2008-3089 SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote attackers to execute arbitrary SQL commands via the uid parameter.
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote attackers to execute arbitrary SQL commands via the uid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xpoze pro | = 3.06 | No fix listed |
References
- 30926 third-party-advisory vendor-advisory
- 30101 vdb-entry
- xpoze-user-sql-injection(43607) vdb-entry
- 6010 exploit