CVE-2008-1968: Cezannesw Cezanne

Medium severity, CVSS 6.0. EPSS: 0.8% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to execute arbitrary SQL commands via the FUNID parameter to (1) CFLookup.asp and (2) CznCommon/CznCustomContainer.asp.

Affected products

• Cezannesw Cezanne: version 7 only

Published 2008-04-27. Last modified 2026-06-16.