CVE-2008-2132: Systementor Postcardmentor

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in step1.asp in Systementor PostcardMentor allows remote attackers to execute arbitrary SQL commands via the cat_fldAuto parameter.

Affected products

• Systementor Postcardmentor: any version

Published 2008-05-09. Last modified 2026-06-16.