Unscored severity · published Oct 22, 2008
CVE-2008-4647
SQL injection vulnerability in index.php in sweetCMS 1.5.2 allows remote attackers to execute arbitrary SQL commands via the page parameter
–
CVSS
1.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in sweetCMS 1.5.2 allows remote attackers to execute arbitrary SQL commands via the page parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SW
Sweetcms · Sweetcms
1.5.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4647
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4647
packetstorm.linuxsecurity.com
http://packetstorm.linuxsecurity.com/0810-exploits/sweetcms-sql.txt
Vendor Advisory
http://secunia.com/advisories/32277
www.securityfocus.com
http://www.securityfocus.com/bid/31774
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/45921
More from Sweetcms
8.1
CVE-2024-8334
master-nan Sweet-CMS log.go LogHandler neutralization for logs