CVE-2008-4768 in TLM CMSinfo

Summary

SQL injection vulnerability in TLM CMS 3.1 allows remote attackers to execute arbitrary SQL commands via the nom parameter to a-b-membres.php. NOTE: the goodies.php vector is already covered by CVE-2007-4808. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

10/27/2008

Disclosure

10/28/2008

CPE

ready

Exploit

Download

CVSS

7.3

EPSS

0.00266

Activities

Very Low

Sources

Do you know our Splunk app?

Download it now for free!