CVE-2008-4524: Adaptcms

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name parameter.

Affected products

• Adaptcms Adaptcms: version 1.3 only

Published 2008-10-09. Last modified 2026-06-16.