CVE-2008-2862

Description

Multiple SQL injection vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to ansFAQ.asp and the (2) template_id parameter to preview.asp.

References

https://www.exploit-db.com/exploits/5859

https://exchange.xforce.ibmcloud.com/vulnerabilities/43190

http://www.securityfocus.com/archive/1/493473/100/0/threaded

http://securityreason.com/securityalert/3957

http://secunia.com/advisories/30762

http://osvdb.org/46461

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS