2 matches found
CVE-2008-4364
SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL commands via the 1 id parameter in the "page" page and 2 txtSearch parameter in the "Search" page...
7.5CVSS8.4AI score0.01145EPSS
SaveExploits2References6
CVE-2008-4364: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL commands via the 1 id parameter in the "page" page and 2 txtSearch parameter in the "Search" page...
7.5CVSS6.4AI score0.01145EPSS
SaveExploits2References2
20