CVE-2008-4364

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.15%

Published

Sep 30, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBParsaWeb CMS - 'Search' SQL Injection TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL commands via the (1) id parameter in the "page" page and (2) txtSearch parameter in the "Search" page.

Weaknesses (CWE)

CWE-89

Affected Products (1)

parsagostar · parsaweb_cmsvulnerable

References (12)

http://securityreason.com/securityalert/4343

http://www.bugreport.ir/index_53.htm

Exploit

http://www.securityfocus.com/archive/1/496799/100/0/threaded

http://www.securityfocus.com/bid/31450

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/45494

https://www.exploit-db.com/exploits/6610

http://securityreason.com/securityalert/4343

http://www.bugreport.ir/index_53.htm

Exploit

http://www.securityfocus.com/archive/1/496799/100/0/threaded

http://www.securityfocus.com/bid/31450

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/45494

https://www.exploit-db.com/exploits/6610

KEV Catalog EPSS Scores Vendors All CVEs