Skip to content

CVE-2008-6324 SQL injection vulnerability in forummessages.cfm in CF_Forum allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter.

HighCVSS 7.5 EPSS 0.97%
Published
Updated
Exploit status
No public exploit known

Description

SQL injection vulnerability in forummessages.cfm in CF_Forum allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter.

Affected products

ProductAffected versionsFixed in
cfmsource cf forum All versions No fix listed

References

  • 33064 third-party-advisory vendor-advisory
  • 32767 exploit vdb-entry
  • 7416 exploit