CVE-2008-3089

  • Last update: Apr 13, 2023

Description

SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote attackers to execute arbitrary SQL commands via the uid parameter.

Software From Fixed in
xpoze / xpoze_pro 3.06 3.06.x

Details

    • Severity: High
  • CVE: CVE-2008-3089
  • Published: Jul 9, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10