Skip to content

CVE-2008-6352 SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands via the menu parameter.

HighCVSS 7.5 EPSS 0.97% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands via the menu parameter.

Affected products

ProductAffected versionsFixed in
xpoze pro = 4.10 No fix listed

References

  • 33126 third-party-advisory vendor-advisory
  • 32789 exploit vdb-entry
  • 7432 exploit