Lucene search
HistoryJul 22, 2008 - 4:41 p.m.
CVE-2008-3256
cve-2008-3256
sql injection
siteframe cms
vulnerability
remote execution
nvd
8.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
27.6%
SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected configurations
Node
siteframesiteframe_beaumontRange≤5.0.5
ORsiteframesiteframe_beaumontMatch5.0.1
ORsiteframesiteframe_beaumontMatch5.0.1a
ORsiteframesiteframe_beaumontMatch5.0.2
ORsiteframesiteframe_cmsRange≤3.2.3
ORsiteframesiteframe_cmsMatch2.0.2
ORsiteframesiteframe_cmsMatch2.0.2\+0005
ORsiteframesiteframe_cmsMatch2.1\+0001
ORsiteframesiteframe_cmsMatch2.2.0
ORsiteframesiteframe_cmsMatch2.2.1
ORsiteframesiteframe_cmsMatch2.2.2
ORsiteframesiteframe_cmsMatch2.3
ORsiteframesiteframe_cmsMatch2.3.2
ORsiteframesiteframe_cmsMatch2.4
ORsiteframesiteframe_cmsMatch3.0.1
ORsiteframesiteframe_cmsMatch3.0.2
ORsiteframesiteframe_cmsMatch3.1.0
ORsiteframesiteframe_cmsMatch3.2.1
ORsiteframesiteframe_cmsMatch3.2.2
Related
prion
prion
Sql injection
2008-07-22 16:41:00
cvelist
cvelist
CVE-2008-3256
2008-07-22 16:00:00
nvd
nvd
CVE-2008-3256
2008-07-22 16:41:00
8.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
27.6%
Related for CVE-2008-3256