CVE-2008-2862

Multiple SQL injection vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to ansFAQ.asp and the (2) template_id parameter to preview.asp.

Link	Resource
http://www.bugreport.ir/?/45	Exploit
http://www.securityfocus.com/bid/29812	Exploit
http://secunia.com/advisories/30762	Vendor Advisory
http://securityreason.com/securityalert/3957
http://osvdb.org/46461
https://exchange.xforce.ibmcloud.com/vulnerabilities/43190
https://www.exploit-db.com/exploits/5859
http://www.securityfocus.com/archive/1/493473/100/0/threaded

Configuration 1

cpe:2.3:a:elinestudio:site_composer:*:*:*:*:*:*:*:*

---

Published : 2008-06-25 12:36

Updated : 2018-10-11 08:44

---

NVD link : CVE-2008-2862

Mitre link : CVE-2008-2862

No products.

CWE-89