VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 22, 2008· Updated Apr 23, 2026

CVE-2008-3256

CVE-2008-3256

Description

SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

19
  • Siteframe/Siteframe Beaumont4 versions
    cpe:2.3:a:siteframe:siteframe_beaumont:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:siteframe:siteframe_beaumont:*:*:*:*:*:*:*:*range: <=5.0.5
    • cpe:2.3:a:siteframe:siteframe_beaumont:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_beaumont:5.0.1a:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_beaumont:5.0.2:*:*:*:*:*:*:*
  • Siteframe/Siteframe CMS15 versions
    cpe:2.3:a:siteframe:siteframe_cms:*:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:siteframe:siteframe_cms:*:*:*:*:*:*:*:*range: <=3.2.3
    • cpe:2.3:a:siteframe:siteframe_cms:2.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_cms:2.0.2\+0005:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_cms:2.1\+0001:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_cms:2.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_cms:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_cms:2.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_cms:2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_cms:2.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_cms:2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_cms:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_cms:3.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_cms:3.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_cms:3.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:siteframe:siteframe_cms:3.2.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.