CVE-2008-0291 - SQL injection vulnerability in showproduct.asp in RichStrong CMS allows remote attackers to execute arbitrary SQL commands via the cat parameter

HIGH

SQL injection vulnerability in showproduct.asp in RichStrong CMS allows remote attackers to execute arbitrary SQL commands via the cat parameter

Published Jan 16, 2008

7.5

HIGH

CVSS 2.0

EPSS 1.15%

SQL injection vulnerability in showproduct.asp in RichStrong CMS allows remote attackers to execute arbitrary SQL commands via the cat parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://secunia.com/advisories/28449		third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/486402/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/27281		vdb-entryx_refsource_BIDExploit
http://www.securityfocus.com/bid/27310		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/39668		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/4910		exploitx_refsource_EXPLOIT-DB

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 16, 2008

Updated Aug 7, 2024

Reserved Jan 16, 2008

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a