CVE-2008-2394

2008-05-2110:00:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.8%

JSON

Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to contact.php and the (2) nid parameter to news.php.

References

secunia.com/advisories/30149

www.tagworx.net/webdesign_seo_muenchen.php?cid=79&pid=5

www.vupen.com/english/advisories/2008/1561/references

exchange.xforce.ibmcloud.com/vulnerabilities/42512

www.exploit-db.com/exploits/5642