CVE-2008-6323: Cfmsource Cf Auction

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in forummessages.cfm in CFMSource CF_Auction allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter.

Affected products

• Cfmsource Cf Auction: affected versions not specified

Published 2009-02-27. Last modified 2026-06-16.