Skip to content

CVE-2008-6345 SQL injection vulnerability in Forum.php in SolarCMS 0.53.8 and 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to indes.php. NOTE: some of these details are obtain...

HighCVSS 7.5 EPSS 0.97%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in Forum.php in SolarCMS 0.53.8 and 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to indes.php. NOTE: some of these details are obtained from third party information.

Affected products

ProductAffected versionsFixed in
cms.maury91 solarcms = 0.53.8 No fix listed
cms.maury91 solarcms = 1.0 No fix listed

References

  • 33269 third-party-advisory vendor-advisory
  • 32974 exploit vdb-entry
  • 7548 exploit