exploitDog

GHSA-2qmc-7r7p-g995

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

SQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter.

SQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2015-5617
http://packetstormsecurity.com/files/133082/Enorth-Webpublisher-CMS-SQL-Injection.html
http://seclists.org/fulldisclosure/2015/Aug/55

EPSS

Процентиль: 78%

0.0199

Низкий

CVE ID

Связанные уязвимости

CVE-2015-5617

CVSS3: 9.8

nvd

больше 6 лет назад

SQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter.

EPSS

Процентиль: 78%

0.0199

Низкий

CVE ID