CVE-2008-3129 Multiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers to execute arbitrary SQL commands via the (1) foreign_key_value parameter in the news page and (2) webpa...
HighCVSS 7.5
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers to execute arbitrary SQL commands via the (1) foreign_key_value parameter in the news page and (2) webpage parameter in the webpage_multi_edit form.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| catviz | = 0.4_beta_1 | No fix listed |
References
- 30014 exploit vdb-entry
- catviz-index-sql-injection(43468) vdb-entry
- 5974 exploit