CVE-2008-6040

Arcadem Pro 2.700-2.802 - SQL Injection via articlecat Parameter

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, probably related to includes/articleblock.php.

References (5)

Core 5
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2700
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/31322
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31975
Patch, Vendor Advisory x_refsource_misc
https://secure.agaresmedia.com/forums/viewtopic.php?f=12&t=2032

Scores

EPSS 0.0119
EPSS Percentile 64.6%

Details

CWE
CWE-89
Status published
Products (3)
agares_media/arcadem_pro 2.700
agares_media/arcadem_pro 2.707
agares_media/arcadem_pro 2.802
Published Feb 03, 2009
Tracked Since Feb 18, 2026