CVE-2008-1990

Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) cID parameter to default.asp and the (2) username parameter to main_login2.asp.

Link	Resource
http://bugreport.ir/index.php?/36	Exploit
http://www.securityfocus.com/bid/28868	Exploit
http://secunia.com/advisories/29916	Vendor Advisory
http://securityreason.com/securityalert/3842
https://exchange.xforce.ibmcloud.com/vulnerabilities/41918
https://www.exploit-db.com/exploits/5478
http://www.securityfocus.com/archive/1/491129/100/0/threaded

Configuration 1

cpe:2.3:a:acidcat:acidcat_cms:3.4.1:*:*:*:*:*:*:*

---

Published : 2008-04-27 09:05

Updated : 2018-10-11 08:38

---

NVD link : CVE-2008-1990

Mitre link : CVE-2008-1990

No products.

CWE-89