CVE-2008-3256
Estado: ModificadaAlta (7.5)—
SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.99%
- Percentil entre todas las CVEs puntuadas: 80
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-89
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2008-3256",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2008-07-22T16:41:00.000",
"references": [
{
"url": "http://www.securityfocus.com/bid/30294",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43908",
"source": "cve@mitre.org"
},
{
"url": "https://www.exploit-db.com/exploits/6099",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/30294",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43908",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.exploit-db.com/exploits/6099",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter."
},
{
"lang": "es",
"value": "Vulnerabilidad de inyección SQL en folder.php en Siteframe CMS y anteriores, y Siteframe Beaumont 5.0.5 y anteriores, permite a atacantes remotos inyectar comandos SQL de su elección a través del parámetro \"id\"."
}
],
"lastModified": "2026-06-16T22:55:28.677",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:siteframe:siteframe_beaumont:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFD0FAE2-4E8D-45F0-A059-F48BEF31A46D",
"versionEndIncluding": "5.0.5"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_beaumont:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D461A646-9474-4007-A4F0-4F85FCE3714D"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_beaumont:5.0.1a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84D6E3FB-3AED-4CC5-B41C-BC101D5D87BA"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_beaumont:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71C445D1-E912-440E-8C59-8A6A2C0885AF"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8AAA2D61-C6E7-4AB2-A5A3-8FC7FA73954D",
"versionEndIncluding": "3.2.3"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79B5F8AE-1B3F-4C7D-B256-50CB08BEFB78"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:2.0.2\\+0005:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E55B19B7-7EA9-4C1A-B2D4-A8DB639C8D55"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:2.1\\+0001:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93F1BDE8-54EE-4323-880C-2370347A6841"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:2.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F41DB2F3-3E2E-41B5-BA41-2395EEA53753"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2F8B9BA-0C53-4270-BE0F-A04225B8FD43"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:2.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D25B5BE7-B94E-4440-8F76-A566064E13C0"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0A748E0-13D7-406E-A349-7D13BB4A10C5"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:2.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "948C5174-85D6-4059-97C3-6A7FEB2BEA64"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0575C51A-446A-47F4-ACA2-4FB59D29A327"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E71CA7D4-3609-4E02-B971-4510BB228888"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:3.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACE8A519-34BD-4167-B620-ECFA51448D22"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:3.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7704C297-F80D-4554-AF6A-912C5D66097C"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:3.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CEF259E-A238-446E-9599-13734392FE18"
},
{
"criteria": "cpe:2.3:a:siteframe:siteframe_cms:3.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27B3DF25-9625-4FBB-A524-938CC9F1CAEB"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}