EDB-4693webappsphpПРОВЕРЕНО

SineCMS 2.3.4 - Calendar SQL Injection

KiNgOfThEwOrLd12/5/2007

Посмотреть на Exploit-DB Посмотреть код на GitLab

ИИ-АнализНа базе ИИ

Код эксплойта

Exploit code not available in database

Посмотреть код на GitLab

Связанные CVE (2)

CVE-2007-6367

NONE

Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username (user) or (2) comme

Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username (user) or (2) comme...

12/15/2007CWE-79

CVE-2007-6366

NONE

Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to mods/Calendar/index.php, accessed through a Cal

Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to mods/Calendar/index.php, accessed through a Cal...

12/15/2007CWE-89