CVE-2008-3256

SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter.

Link	Resource
http://www.securityfocus.com/bid/30294	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/43908
https://www.exploit-db.com/exploits/6099

Configuration 1

cpe:2.3:a:siteframe:siteframe_cms:3.2.2:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_cms:3.1.0:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_cms:2.2.1:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_cms:2.1+0001:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_cms:3.0.1:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_cms:2.3.2:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_cms:2.2.2:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_cms:3.2.1:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_beaumont:5.0.2:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_cms:2.4:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_cms:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_beaumont:5.0.1:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_beaumont:*:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_cms:*:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_cms:2.3:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_beaumont:5.0.1a:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_cms:2.0.2+0005:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_cms:3.0.2:*:*:*:*:*:*:* cpe:2.3:a:siteframe:siteframe_cms:2.2.0:*:*:*:*:*:*:*

---

Published : 2008-07-22 04:41

Updated : 2017-09-29 01:31

---

NVD link : CVE-2008-3256

Mitre link : CVE-2008-3256

No products.

CWE-89