CVE-2008-6652

Insanevisions Onecms - SQL Injection

Title source: rule

Description

SQL injection vulnerability in asd.php in OneCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the sitename parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Cod3rZ · perlwebappsphp
https://www.exploit-db.com/exploits/5557

Scores

EPSS 0.0032
EPSS Percentile 55.3%

Details

CWE
CWE-89
Status published
Products (1)
insanevisions/onecms 2.5
Published Apr 07, 2009
Tracked Since Feb 18, 2026