Unrated severityNVD Advisory· Published Feb 3, 2009· Updated Jun 16, 2026
CVE-2008-6040
CVE-2008-6040
Description
SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, probably related to includes/articleblock.php.
Affected products
4cpe:2.3:a:agares_media:arcadem_pro:2.700:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:agares_media:arcadem_pro:2.700:*:*:*:*:*:*:*
- cpe:2.3:a:agares_media:arcadem_pro:2.707:*:*:*:*:*:*:*
- cpe:2.3:a:agares_media:arcadem_pro:2.802:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- secure.agaresmedia.com/forums/viewtopic.phpnvdPatchVendor Advisory
- packetstorm.linuxsecurity.com/0809-exploits/arcadempro-sql.txtnvdExploit
- secunia.com/advisories/31975nvdVendor Advisory
- www.securityfocus.com/bid/31322nvd
- www.vupen.com/english/advisories/2008/2700nvd
News mentions
0No linked articles in our index yet.