CVE-2008-2487: Maxsite

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action.

Affected products

• Maxsite Maxsite: up to and including 1.10

Published 2008-05-28. Last modified 2026-06-16.