AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2008-0739

HIGH · CVSS 7.5 EPSS 0.96%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-02-13 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2008-0739
Severity
HIGH
CVSS
7.5
EPSS
0.96%

Original Filing — NVD Description

SQL injection vulnerability in admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and earlier 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the FedExAccount parameter.