CVE-2008-0498: Bigware Shop

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in main_bigware_53.tpl.php in Bigware Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the pollid parameter in a results action to main_bigware_53.php.

Affected products

• Bigware Bigware Shop: version 2.0 only

Published 2008-01-30. Last modified 2026-06-16.