CVE-2008-3089

HIGH 7.5CVE-2008-3089 · Published 09/07/2008 · updated 16/06/2026

In short

CVE-2008-3089 is a HIGH (CVSS 7.5) vulnerability affecting xpoze pro (xpoze).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xpoze pro xpoze	`= 3.06`	No fix yet

Description

SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote attackers to execute arbitrary SQL commands via the uid parameter.

References

secunia.com/advisories/30926 · Vendor Advisory
securityfocus.com/bid/30101
exchange.xforce.ibmcloud.com/vulnerabilities/43607
exploit-db.com/exploits/6010

More vulnerabilities in xpoze pro

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free