CVE-2013-6839 in InstantCMS

Sumário (Inglês)

SQL injection vulnerability in InstantSoft InstantCMS 1.10.3 and earlier allows remote attackers to execute arbitrary SQL commands via the orderby parameter to catalog/[id].

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

20/11/2013

Divulgação

13/12/2013

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
65742	InstantSoft InstantCMS Injeção SQL	89	Prova de conceito	Não definido	CVE-2013-6839

Fontes

• MITRE
• NVD
• CVE Details