CVE-2008-4364 | BDVDB-2026-32640 Detail

Description#

SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL commands via the (1) id parameter in the "page" page and (2) txtSearch parameter in the "Search" page.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/31450
http://securityreason.com/securityalert/4343
http://www.securityfocus.com/archive/1/496799/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/45494
https://www.exploit-db.com/exploits/6610
http://www.bugreport.ir/index_53.htm

Exploit#

https://www.exploit-db.com/exploits/6610

History#

Version 12008-09-30Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.