Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-5294. PoCs published by Hussin X.
AI-analyzed exploit summary This is a writeup describing a blind SQL injection vulnerability in WebStudio eCatalogue via the 'pageid' parameter. It includes proof-of-concept URLs demonstrating the vulnerability but does not contain executable exploit code.
Description
SQL injection vulnerability in index.php in WebStudio eCatalogue allows remote attackers to execute arbitrary SQL commands via the pageid parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Hussin X · textwebappsphp
https://www.exploit-db.com/exploits/7223
This is a writeup describing a blind SQL injection vulnerability in WebStudio eCatalogue via the 'pageid' parameter. It includes proof-of-concept URLs demonstrating the vulnerability but does not contain executable exploit code.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
WebStudio eCatalogue
No auth needed
Prerequisites:
Access to the vulnerable web application
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46832
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/50200
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/4670
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/32873
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/7223
Scores
EPSS
0.0104
EPSS Percentile
59.5%
Details
CWE
CWE-89
Status
published
Products (1)
bdigital_web_solutions/webstudio_ecatalogue
_nil_
Published
Dec 01, 2008
Tracked Since
Feb 18, 2026