CVE-2008-6040

SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, probably related to includes/articleblock.php.

Link	Resource
http://packetstorm.linuxsecurity.com/0809-exploits/arcadempro-sql.txt	Exploit
http://secunia.com/advisories/31975	Vendor Advisory
https://secure.agaresmedia.com/forums/viewtopic.php?f=12&t=2032	Patch Vendor Advisory
http://www.securityfocus.com/bid/31322
http://www.vupen.com/english/advisories/2008/2700

Configuration 1

cpe:2.3:a:agares_media:arcadem_pro:2.707:*:*:*:*:*:*:* cpe:2.3:a:agares_media:arcadem_pro:2.802:*:*:*:*:*:*:* cpe:2.3:a:agares_media:arcadem_pro:2.700:*:*:*:*:*:*:*

---

Published : 2009-02-03 11:30

Updated : 2009-08-19 05:22

---

NVD link : CVE-2008-6040

Mitre link : CVE-2008-6040

No products.

CWE-89