CVE-2008-1462
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to...
CVE-2008-1462 is a medium vulnerability (CVSS 6.8) in Runcms, published March 24, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.91%, the 59th percentile. No source names a fixed version.
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action.
Exploit likelihood
What each source reports
NVD Score used
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action.
- Record
CVE-2008-1462- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action.
- Record
CVE-2008-1462- Updated
- 2026-11-02
EUVDEUVD-2008-1466 No score
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action.
- Record
EUVD-2008-1466- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rr9g-jhf3-cqmm No score
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to...
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action.
- Record
GHSA-rr9g-jhf3-cqmm- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | RunCMS Module section - 'artid' SQL Injection | 2008-03-20 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |