CVE-2010-2317 in WmsCms
Summary
Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search, (2) sbr, (3) pid, (4) sbl, and (5) FilePath parameters to default.asp; and the (6) sbr, (7) pr, and (8) psPrice parameters to printpage.asp.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
06/17/2010
Disclosure
06/17/2010
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 5339 | WebMaster Solutions WmsCms printpage.asp sql injection | 89 | Proof-of-Concept | Not defined | CVE-2010-2317 |