CVE-2008-7267

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Dec 1, 2010
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2008

CVE-2008-72685.0The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to php_info in mCVE-2008-72695.8Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and CVE-2008-72704.3OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the sessCVE-2008-72714.3Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE, possibly 3.3.CVE-2008-72727.5FireGPG before 0.6 handle user’s passphrase and decrypted cleartext insecurely by writing pre-encrypted cleartext and the user's passphrase CVE-2008-72737.8A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling.CVE-2008-72744.3IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal applicCVE-2008-72754.3Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) before 2.3.3 allow remote attackers to inject arbitCVE-2008-72764.6Kernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which CVE-2008-72776.5Open Ticket Request System (OTRS) before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorCVE-2008-72785.0The S/MIME feature in Open Ticket Request System (OTRS) before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly configure the RANDFILECVE-2008-72796.5The CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote authenticated users to bypass intended acces
CVE-2008-7267: High severity, CVSS 7.5 | Vulnix