CVE-2013-6839 in InstantSoft InstantCMS
Summary
SQL injection vulnerability in InstantSoft InstantCMS 1.10.3 and earlier allows remote attackers to execute arbitrary SQL commands via the orderby parameter to catalog/[id].
Reservation
11/20/2013
Disclosure
12/13/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65742 | InstantSoft InstantCMS sql injection | 89 | Proof-of-Concept | Not defined | CVE-2013-6839 |