CVE-2008-4159 SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitrary SQL commands via the page (pageid) parameter.
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitrary SQL commands via the page (pageid) parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zanfi solutions jaw portal | All versions | No fix listed |
| zanfi solutions zanfi cms lite | All versions | No fix listed |
References
- 4283 third-party-advisory
- 31116 vdb-entry
- zanficmslite-page-sql-injection(45029) vdb-entry
- 6423 exploit