What is GHSA-qrw3-mq8r-cq7q?

GHSA-qrw3-mq8r-cq7q is a security advisory published by GitHub Security Advisories with High severity. AdaptCMS SQL Injection vulnerability

Which CVE IDs does GHSA-qrw3-mq8r-cq7q cover?

GHSA-qrw3-mq8r-cq7q covers the following CVE IDs: CVE-2008-4524. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-qrw3-mq8r-cq7q?

GHSA-qrw3-mq8r-cq7q affects 1 product, including: composer/adaptcms/adaptcms:\u003c= 1.3.

GHSA-qrw3-mq8r-cq7qHigh

AdaptCMS SQL Injection vulnerability

Vendor

GitHub Security Advisories

Published

May 2, 2022

Last Modified

April 10, 2025

🔗 CVE IDs covered (1)

CVE-2008-4524 →

📋 Description

SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name parameter.

🎯 Affected products1

composer/adaptcms/adaptcms:<= 1.3

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2008-4524
https://exchange.xforce.ibmcloud.com/vulnerabilities/45642
https://www.exploit-db.com/exploits/6662
http://www.adaptcms.com/article/51/News/URGENT-AdaptCMS-13-Security-Fix-Released
https://web.archive.org/web/20200228141415/http://www.securityfocus.com/bid/31557
https://github.com/advisories/GHSA-qrw3-mq8r-cq7q