CVE-2008-2901

no score yetEPSS 0.9%

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.4 allow remote authenticated users to execute arbitrary SQL commands via the (1) address parameter to addressbook.php, the (2) getnews parameter to familynews.php, and the (3) poll_id parameter to home.php in a results action.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2008-06-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

haudenschilt:family_connections_cms

References

http://secunia.com/advisories/30680
http://www.securityfocus.com/bid/29722
https://exchange.xforce.ibmcloud.com/vulnerabilities/43097
https://www.exploit-db.com/exploits/5811
http://secunia.com/advisories/30680

Check your stack JSON