Unscored severity · published Jul 10, 2008
CVE-2008-3122
Multiple SQL injection vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to execute arbitrary SQL commands via the unspecified vectors
–
CVSS
0.9%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to execute arbitrary SQL commands via the unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CW
Centreware Web · Xerox
through 1.0; through 2.0; through 3; through 4.6.42 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3122
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3122
Patch
http://secunia.com/advisories/30978
Patch
http://www.securityfocus.com/bid/30151
Patch
http://www.xerox.com/downloads/usa/en/c/cert_XRX08_008.pdf
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/43672
More from Centreware Web
5.4
CVE-2026-1769
Stored XSS on Xerox CentreWare Web 7.0.6
–
CVE-2008-3121
Multiple cross-site scripting (XSS) vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to inject arbitrary web script or HTML via…