Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qxcg-58f3-9fmx

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646.

SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646.

EPSS

Процентиль: 32%
0.00122
Низкий

Дефекты

CWE-89

Связанные уязвимости

nvd
больше 15 лет назад

SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646.

EPSS

Процентиль: 32%
0.00122
Низкий

Дефекты

CWE-89