← All advisories

Unrated severityNVD Advisory· Published Nov 25, 2008· Updated Jun 16, 2026

CVE-2008-5223

CVE-2008-5223

Description

SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Airvae/Commerce2 versions
cpe:2.3:a:airvae:commerce:3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:airvae:commerce:3.0:*:*:*:*:*:*:*
- (no CPE)range: =3.0

Patches

Vulnerability mechanics

References

5

secunia.com/advisories/30440nvdVendor Advisory
securityreason.com/securityalert/4637nvd
www.securityfocus.com/bid/29423nvd
exchange.xforce.ibmcloud.com/vulnerabilities/42734nvd
www.exploit-db.com/exploits/5689nvd

News mentions

0

No linked articles in our index yet.