← Database

CVE-2008-7208

MEDIUM CVSS: 6.8 Published: 2009-09-11 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username parameter ($usernameb variable) to a_login.php or (2) user parameter to staff.php.

Affected Platforms

Insane Visions Onecms

Weakness Type

CWE-89

References