CVE-2008-3122

Multiple SQL injection vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to execute arbitrary SQL commands via the unspecified vectors.

Published: Jul 10, 2008
Updated: Apr 13, 2023
CVE: CVE-2008-3122
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.5
AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
xerox / centreware_web	-	3.x
xerox / centreware_web	-	2.0.x
xerox / centreware_web	-	1.0.x
xerox / centreware_web	-	4.6.42.x

http://secunia.com/advisories/30978
http://www.securityfocus.com/bid/30151
http://www.xerox.com/downloads/usa/en/c/cert_XRX08_008.pdf
https://exchange.xforce.ibmcloud.com/vulnerabilities/43672

Vulnerability Database

CVE-2008-3122