high7.5
CVE-2008-6040
SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote attackers to execute arbitrary SQL commands via the articlecat parame…
Impact
SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, probably related to includes/articleblock.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Agares Media | Arcadem Pro | Versions 2.700, 2.707, 2.802 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstorm.linuxsecurity.com/0809-exploits/arcadempro-sql.txt
- http://secunia.com/advisories/31975
- http://www.securityfocus.com/bid/31322
- http://www.vupen.com/english/advisories/2008/2700
- https://secure.agaresmedia.com/forums/viewtopic.php?f=12&t=2032
- http://packetstorm.linuxsecurity.com/0809-exploits/arcadempro-sql.txt
- http://secunia.com/advisories/31975
- http://www.securityfocus.com/bid/31322
- http://www.vupen.com/english/advisories/2008/2700
- https://secure.agaresmedia.com/forums/viewtopic.php?f=12&t=2032