Description

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.4 allow remote authenticated users to execute arbitrary SQL commands via the (1) address parameter to addressbook.php, the (2) getnews parameter to familynews.php, and the (3) poll_id parameter to home.php in a results action.

Remediation

References

CVE-2008-2901

Related Vulnerabilities

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8120)

WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.4)

MySQL Divide By Zero Vulnerability (CVE-2019-16168)

Grafana Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-21703)

b2evolution Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-5910)

Severity

Medium

Classification

CVE-2008-2901 CWE-138

Tags

Missing Update Known Vulnerabilities