Skip to content

CVE-2008-5934 SQL injection vulnerability in index.php in CMS ISWEB 3.0 allows remote attackers to execute arbitrary SQL commands via the id_sezione parameter.

HighCVSS 7.5 EPSS 0.97% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

SQL injection vulnerability in index.php in CMS ISWEB 3.0 allows remote attackers to execute arbitrary SQL commands via the id_sezione parameter.

Affected products

ProductAffected versionsFixed in
cmsisweb cms isweb = 3.0 No fix listed

References

  • 33090 third-party-advisory vendor-advisory
  • 4933 third-party-advisory
  • 32823 exploit vdb-entry
  • 7465 exploit