Unknown · Zanfi Cms Lite · CVE-2008-4159
**Name of the Vulnerable Software and Affected Versions**
Jaw Portal (affected versions not specified)
Zanfi CMS lite (affected versions not specified)
**Description**
The issue allows remote attackers to execute arbitrary SQL commands via the `pageid` parameter in the "index.php" file. This can be exploited by sending a malicious request to the `/index.php` endpoint.
**Recommendations**
For Jaw Portal, update the index.php file to properly sanitize the `pageid` parameter to prevent SQL injection.
For Zanfi CMS lite, update the index.php file to properly sanitize the `pageid` parameter to prevent SQL injection.
As a temporary workaround, consider restricting access to the index.php file until a patch is available.