CVE-2011-0645 in PHPCMS 2008info

Summary

SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the where_time parameter in a get action.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

01/25/2011

Disclosure

01/25/2011

Entries

1

CPE

ready

CWE

CWE-89

Exploit

Download

CVSS

7.3

EPSS

0.00408

CTI

0.00

Sources

Do you need the next level of professionalism?

Upgrade your account now!