CVE-2008-2862

Multiple SQL injection vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to ansFAQ.asp and the (2) template_id parameter to preview.asp.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
VendorProductVersion
elinestudiosite_composer
𝑥
≤ 2.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/46461
http://secunia.com/advisories/30762
http://securityreason.com/securityalert/3957
http://www.bugreport.ir/?/45
http://www.securityfocus.com/archive/1/493473/100/0/threaded
http://www.securityfocus.com/bid/29812
https://exchange.xforce.ibmcloud.com/vulnerabilities/43190
https://www.exploit-db.com/exploits/5859
http://osvdb.org/46461
http://secunia.com/advisories/30762
http://securityreason.com/securityalert/3957
http://www.bugreport.ir/?/45
http://www.securityfocus.com/archive/1/493473/100/0/threaded
http://www.securityfocus.com/bid/29812
https://exchange.xforce.ibmcloud.com/vulnerabilities/43190
https://www.exploit-db.com/exploits/5859