CVEvulnerability
CVE-2008-3256
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-07-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected configurations
• siteframe siteframe beaumont (<= 5.0.5)
• siteframe siteframe beaumont 5.0.1
• siteframe siteframe beaumont 5.0.1a
• siteframe siteframe beaumont 5.0.2
• siteframe siteframe cms (<= 3.2.3)
• siteframe siteframe cms 2.0.2
• siteframe siteframe cms 2.0.2\+0005
• siteframe siteframe cms 2.1\+0001
• siteframe siteframe cms 2.2.0
• siteframe siteframe cms 2.2.1
• siteframe siteframe cms 2.2.2
• siteframe siteframe cms 2.3
• siteframe siteframe cms 2.3.2
• siteframe siteframe cms 2.4
• siteframe siteframe cms 3.0.1
• siteframe siteframe cms 3.0.2
• siteframe siteframe cms 3.1.0
• siteframe siteframe cms 3.2.1
• siteframe siteframe cms 3.2.2
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://www.securityfocus.com/bid/30294 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43908 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6099 www.exploit-db.com
- http://www.securityfocus.com/bid/30294 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43908 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6099 www.exploit-db.com