CVE-2008-2870: Sharecms

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the (1) eventID parameter to event_info.php and the (2) userID parameter to list_user.php.

Affected products

• Sharecms Sharecms: version 0.1 only

Published 2008-06-26. Last modified 2026-06-16.