← Database

CVE-2008-5195

HIGH CVSS: 7.5 Published: 2008-11-21 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in SebracCMS (sbcms) 0.4 allow remote attackers to execute arbitrary SQL commands via (1) the recid parameter to cms/form/read.php, (2) the uname parameter to cms/index.php, and other unspecified vectors.

Affected Platforms

Sebrac Sebraccms

Weakness Type

CWE-89

References