AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

CVE-2008-3153: SQL injection vulnerability in Triton CMS Pro allows remote attackers to execute arbitrary SQL commands via the X-Forwar

infovulnerability

security

Source: NVD/CVE DatabaseJuly 11, 2008CVE-2008-3153

Summary

Triton CMS Pro contains a SQL injection vulnerability (a flaw where attackers can insert malicious SQL commands into a program's database queries) in how it processes the X-Forwarded-For HTTP header, allowing attackers to run arbitrary SQL commands on the affected system.

Vulnerability Details

CVSS Score

7.5

EPSS (30-day exploit probability)

EPSS: 0.5%

Classification

Attack SophisticationTrivial

Taxonomy References

CWE (Weakness Type)

CWE-89

CAPEC (Attack Pattern)

CAPEC-66

Original source: https://nvd.nist.gov/vuln/detail/CVE-2008-3153

First tracked: February 15, 2026 at 08:45 PM

Classified by LLM (prompt v3) · confidence: 95%