CVE-2008-2901 EXPLOIT
6.5
MEDIUM · CVSS 2.0 · EPSS 0.9% (pctl 57)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.4 allow remote authenticated users to execute arbitrary SQL commands via the (1) address parameter to addressbook.php, the (2) getnews parameter to familynews.php, and the (3) poll_id parameter to home.php in a results action.
Scoring
| CVSS | 6.5 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
| EPSS | 0.86% — more likely to be exploited than 57% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-06-30 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| haudenschilt | family connections cms |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Family Connections CMS 1.4 - Multiple SQL Injections | 2008-06-14 |
References
- http://secunia.com/advisories/30680
- http://www.securityfocus.com/bid/29722
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43097
- https://www.exploit-db.com/exploits/5811
- http://secunia.com/advisories/30680
- http://www.securityfocus.com/bid/29722
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43097
- https://www.exploit-db.com/exploits/5811
→ the Explorer · watch your stack · NVD