CVEvulnerability
CVE-2008-1990
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-04-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) cID parameter to default.asp and the (2) username parameter to main_login2.asp.
Affected configurations
• acidcat acidcat cms 3.4.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://bugreport.ir/index.php?/36 Exploit
- http://secunia.com/advisories/29916 Vendor Advisory
- http://securityreason.com/securityalert/3842 securityreason.com
- http://www.securityfocus.com/archive/1/491129/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28868 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41918 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5478 www.exploit-db.com
- http://bugreport.ir/index.php?/36 Exploit
- http://secunia.com/advisories/29916 Vendor Advisory
- http://securityreason.com/securityalert/3842 securityreason.com
- http://www.securityfocus.com/archive/1/491129/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28868 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41918 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5478 www.exploit-db.com