CVEvulnerability
CVE-2008-2862
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-06-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to ansFAQ.asp and the (2) template_id parameter to preview.asp.
Affected configurations
• elinestudio site composer (<= 2.6)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/46461 osvdb.org
- http://secunia.com/advisories/30762 Vendor Advisory
- http://securityreason.com/securityalert/3957 securityreason.com
- http://www.bugreport.ir/?/45 Exploit
- http://www.securityfocus.com/archive/1/493473/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29812 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43190 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5859 www.exploit-db.com
- http://osvdb.org/46461 osvdb.org
- http://secunia.com/advisories/30762 Vendor Advisory
- http://securityreason.com/securityalert/3957 securityreason.com
- http://www.bugreport.ir/?/45 Exploit
- http://www.securityfocus.com/archive/1/493473/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29812 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43190 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5859 www.exploit-db.com