CVE-2008-6040: Agares Media Arcadem Pro

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, probably related to includes/articleblock.php.

Affected products

• Agares Media Arcadem Pro: version 2.700 only; version 2.707 only; version 2.802 only

Published 2009-02-03. Last modified 2026-06-16.