Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

N0Ne

#35634of 53,622
7.5Total CVSS
Vulnerabilities · 1
PT-2008-4672
7.5
2008-07-22
Siteframe · Siteframe Cms · CVE-2008-3256
Name of the Vulnerable Software and Affected Versions: Siteframe CMS versions 3.2.3 and earlier Siteframe Beaumont versions 5.0.5 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the "folder.php" file. Recommendations: For Siteframe CMS versions 3.2.3 and earlier, update to a version later than 3.2.3. For Siteframe Beaumont versions 5.0.5 and earlier, update to a version later than 5.0.5. As a temporary workaround, consider restricting access to the `id` parameter in the "folder.php" file to minimize the risk of exploitation.