CVE-2008-6028: University Of Queensland Fez

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in list.php in University of Queensland Library Fez 1.3 and 2.0 RC1 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter in a subject action.

Affected products

• University Of Queensland Fez: version 1.3 only; version 2.0 only

Published 2009-02-03. Last modified 2026-06-16.