← Database

CVE-2008-0737

HIGH CVSS: 7.5 Published: 2008-02-13 Modified: 2026-06-16

Description

SQL injection vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and other 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the helpfield parameter.

Affected Platforms

Shoppingtree Candypress Store

Weakness Type

CWE-89

References