SQL Injection in Siteframe Beaumont
CVE-2008-3256
SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Vulnerability class: SQL Injection
EPSS: 0.020 (78.6th percentile) — read the EPSS interpretation.
Affected products
- Siteframe Siteframe_beaumont — versions 5.0.1, 5.0.1a, 5.0.2
- Siteframe Siteframe_cms — versions 2.0.2, 2.0.2\+0005, 2.1\+0001
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (vdb-entry, x_refsource_XF)