CVE-2008-2796

CVE-2008-2796 concerns a SQL injection in FreeCMS 0.2, triggered via the page parameter in index.php. The vulnerability arises from unsafely composing SQL queries with user-supplied input, allowing remote attackers to execute arbitrary SQL commands. Affected software is FreeCMS 0.2 (index.php: pa...