CVE-2008-4364: Parsagostar Parsaweb CMS

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL commands via the (1) id parameter in the "page" page and (2) txtSearch parameter in the "Search" page.

Affected products

• Parsagostar Parsaweb CMS: any version

Published 2008-09-30. Last modified 2026-06-16.