CVE-2008-6156: Formfields Adman

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in editCampaign.php in AdMan 1.1.20070907 allows remote authenticated users to execute arbitrary SQL commands via the campaignId parameter.

Affected products

• Formfields Adman: version 1.1.20070907 only

Published 2009-02-16. Last modified 2026-06-16.