CVE: Common Vulnerabilities and Exposures

alert

Notice: Keyword searching of CVE Records is now available in the search box above. Keywords may include a CVE ID (e.g., CVE-2024-1234), or one or more keywords separated by a space (e.g., authorization, SQL Injection, cross site scripting, etc.). Learn more here.

alert

Notice: Keyword searching of CVE Records is now available in the search box above. Keywords may include a CVE ID (e.g., CVE-2024-1234), or one or more keywords separated by a space (e.g., authorization, SQL Injection, cross site scripting, etc.). Learn more here.

Expand or collapse notification button

Required CVE Record Information

Description

SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter.

Product Status

Information not provided

References 4 Total

exploit-db.com: 6823
external site
exploit
secunia.com: 32404
external site
third-party-advisory
securityfocus.com: 20081023 SiteEngine 5.x Multiple Remote Vulnerabilities
external site
mailing-list
securityfocus.com: 31889
external site
vdb-entry

Updated: 2024-08-07

This container includes required additional information provided by the CVE Program for this vulnerability.

References 4 Total

exploit-db.com: 6823
external site
exploitx_transferred
secunia.com: 32404
external site
third-party-advisoryx_transferred
securityfocus.com: 20081023 SiteEngine 5.x Multiple Remote Vulnerabilities
external site
mailing-listx_transferred
securityfocus.com: 31889
external site
vdb-entryx_transferred