CVE-2008-5336

WebStudio CMS - SQL Injection via pageid Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-5336. PoCs published by Glafkos Charalambous.

AI-analyzed exploit summary This exploit demonstrates a blind SQL injection vulnerability in WebStudio CMS via the 'pageid' parameter. The PoC includes test cases to verify the vulnerability and extract database version information.

Description

SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via the pageid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Glafkos Charalambous · textwebappsphp
https://www.exploit-db.com/exploits/7216

This exploit demonstrates a blind SQL injection vulnerability in WebStudio CMS via the 'pageid' parameter. The PoC includes test cases to verify the vulnerability and extract database version information.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: WebStudio CMS
No auth needed
Prerequisites: Access to the target WebStudio CMS instance
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (7)

Core 7
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/3273
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/7236
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/4690
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/32449
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/498597/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46818
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/7216

Scores

EPSS 0.0238
EPSS Percentile 81.7%

Details

CWE
CWE-89
Status published
Products (1)
bdigital_web_solutions/webstudio_cms _nil_
Published Dec 05, 2008
Tracked Since Feb 18, 2026