CVE-2014-9464 in Microweber
Résumé (Anglaise)
SQL injection vulnerability in Category.php in Microweber CMS 0.95 before 20141209 allows remote attackers to execute arbitrary SQL commands via the category parameter when displaying a category, related to the $parent_id variable.
Réserver
03/01/2015
Divulgation
03/01/2015
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 73490 | Microweber Category.php injection SQL | 89 | Preuve de concept | Correctif officiel | CVE-2014-9464 |