CVE-2008-1990

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.19%

Published

Apr 27, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBAcidcat CMS 3.4.1 - Multiple Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) cID parameter to default.asp and the (2) username parameter to main_login2.asp.

Weaknesses (CWE)

CWE-89

Affected Products (1)

acidcat · acidcat_cmsvulnerable

References (14)

http://bugreport.ir/index.php?/36

Exploit

http://secunia.com/advisories/29916

Vendor Advisory

http://securityreason.com/securityalert/3842

http://www.securityfocus.com/archive/1/491129/100/0/threaded

http://www.securityfocus.com/bid/28868

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/41918

https://www.exploit-db.com/exploits/5478

http://bugreport.ir/index.php?/36

Exploit

http://secunia.com/advisories/29916

Vendor Advisory

http://securityreason.com/securityalert/3842

http://www.securityfocus.com/archive/1/491129/100/0/threaded

http://www.securityfocus.com/bid/28868

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/41918

https://www.exploit-db.com/exploits/5478

KEV Catalog EPSS Scores Vendors All CVEs