CVE-2008-0232

  • Last update: Apr 13, 2023

Description

Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to index.php, or the (2) f or t parameters to forums/index.php.

Software From Fixed in
zero_cms / zero_cms 1.0_alpha 1.0_alpha.x

Details

    • Severity: High
  • CVE: CVE-2008-0232
  • Published: Jan 11, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10