CVEvulnerability
CVE-2008-4364
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-09-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL commands via the (1) id parameter in the "page" page and (2) txtSearch parameter in the "Search" page.
Affected configurations
• parsagostar parsaweb cms
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://securityreason.com/securityalert/4343 securityreason.com
- http://www.bugreport.ir/index_53.htm Exploit
- http://www.securityfocus.com/archive/1/496799/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/31450 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45494 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6610 www.exploit-db.com
- http://securityreason.com/securityalert/4343 securityreason.com
- http://www.bugreport.ir/index_53.htm Exploit
- http://www.securityfocus.com/archive/1/496799/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/31450 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45494 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6610 www.exploit-db.com