CVE-2008-7267
UnknownEPSS 1.19%
Last modified
CVE-2008-7267 is a vulnerability of currently unknown severity. SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter.. EPSS estimates a 1.19% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Boka | Siteengine | 5.0 |
References
- http://secunia.com/advisories/32404Vendor Advisory
- http://secunia.com/advisories/32404Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-7267?
SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter.
How severe is CVE-2008-7267?
Severity scoring for CVE-2008-7267 is pending analysis. The EPSS model estimates a 1.19% probability of exploitation in the next 30 days.
How do I fix CVE-2008-7267?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-7261The Workplace (aka WP) component in IBM FileNet P8 Applicati…
- CVE-2008-7262Multiple directory traversal vulnerabilities in FTPServer.py…
- CVE-2008-7263ftpserver.py in pyftpdlib before 0.5.0 does not delay its re…
- CVE-2008-7264The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.…
- CVE-2008-7265The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows …
- CVE-2008-7266Cross-site scripting (XSS) vulnerability in an unspecified S…
- CVE-2008-7268The phpinfo function in SiteEngine 5.x allows remote attacke…
- CVE-2008-7269Open redirect vulnerability in api.php in SiteEngine 5.x all…
- CVE-2008-7270OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHA…
- CVE-2008-7271Multiple cross-site scripting (XSS) vulnerabilities in the H…
- CVE-2008-7272FireGPG before 0.6 handle user’s passphrase and decrypted cl…7.5
- CVE-2008-7273A symlink issue exists in Iceweasel-firegpg before 0.6 due t…7.8
Are you affected by CVE-2008-7267?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST