CVEvulnerability
CVE-2008-2901
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-06-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.4 allow remote authenticated users to execute arbitrary SQL commands via the (1) address parameter to addressbook.php, the (2) getnews parameter to familynews.php, and the (3) poll_id parameter to home.php in a results action.
Affected configurations
• haudenschilt family connections cms 1.4
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/30680 Vendor Advisory
- http://www.securityfocus.com/bid/29722 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43097 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5811 www.exploit-db.com
- http://secunia.com/advisories/30680 Vendor Advisory
- http://www.securityfocus.com/bid/29722 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43097 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5811 www.exploit-db.com