Siteframe · Siteframe Cms · CVE-2008-3256
Name of the Vulnerable Software and Affected Versions:
Siteframe CMS versions 3.2.3 and earlier
Siteframe Beaumont versions 5.0.5 and earlier
Description:
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the "folder.php" file.
Recommendations:
For Siteframe CMS versions 3.2.3 and earlier, update to a version later than 3.2.3.
For Siteframe Beaumont versions 5.0.5 and earlier, update to a version later than 5.0.5.
As a temporary workaround, consider restricting access to the `id` parameter in the "folder.php" file to minimize the risk of exploitation.