Описание
AdaptCMS SQL Injection vulnerability
SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name parameter.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2008-4524
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45642
- https://web.archive.org/web/20200228141415/http://www.securityfocus.com/bid/31557
- https://www.exploit-db.com/exploits/6662
- http://www.adaptcms.com/article/51/News/URGENT-AdaptCMS-13-Security-Fix-Released
Пакеты
Наименование
adaptcms/adaptcms
composer
Затронутые версииВерсия исправления
<= 1.3
Отсутствует
Связанные уязвимости
nvd
больше 17 лет назад
SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name parameter.