CVE-2013-7139

Опубликовано: 09 янв. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in download.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows remote to execute arbitrary SQL commands via the category parameter.

Ссылки

http://www.securityfocus.com/bid/64715
Exploit
https://www.htbridge.com/advisory/HTB23191
Exploit
http://www.securityfocus.com/bid/64715
Exploit
https://www.htbridge.com/advisory/HTB23191
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:*:*:*:*:*:*:*:*

Версия до 4.0 (включая)

cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.2:a:*:*:*:*:*:*

cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.3:*:*:*:*:*:*:*

cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.4:*:*:*:*:*:*:*

cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.5.1:*:*:*:*:*:*:*

cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.5.2:*:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00161

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-q422-v5w8-4qm5

github

больше 3 лет назад