← Database

CVE-2008-0739

HIGH CVSS: 7.5 Published: 2008-02-13 Modified: 2026-06-16

Description

SQL injection vulnerability in admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and earlier 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the FedExAccount parameter.

Affected Platforms

Shoppingtree Candypress Store

Weakness Type

CWE-89

References