CVEvulnerability
CVE-2008-2135
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-05-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) contentname parameter to showdetails.php and the (2) article parameter to printer.php.
Affected configurations
• visualshapers ezcontents 2.0.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://securityreason.com/securityalert/3865 securityreason.com
- http://www.securityfocus.com/archive/1/491813/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29098 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42260 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5559 www.exploit-db.com
- http://securityreason.com/securityalert/3865 securityreason.com
- http://www.securityfocus.com/archive/1/491813/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29098 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42260 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5559 www.exploit-db.com