Описание
Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the login_username parameter to login.php or (2) the item parameter to news.php.
Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the login_username parameter to login.php or (2) the item parameter to news.php.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2007-3313
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34936
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34937
- https://www.exploit-db.com/exploits/4081
- http://osvdb.org/37068
- http://osvdb.org/37069
- http://secunia.com/advisories/25737
- http://www.securityfocus.com/bid/24546
- http://www.vupen.com/english/advisories/2007/2264
EPSS
Процентиль: 80%
0.01459
Низкий
CVE ID
Связанные уязвимости
nvd
больше 18 лет назад
Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the login_username parameter to login.php or (2) the item parameter to news.php.
EPSS
Процентиль: 80%
0.01459
Низкий