[Forgot Password]
Login  Register Subscribe

23631

 
 

115083

 
 

97147

 
 

909

 
 

78730

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2008-6614

Date: (C)2009-04-06   (M)2017-10-04
 
CVSS Score: 7.5Access Vector: NETWORK
Exploitability Subscore: 10.0Access Complexity: LOW
Impact Subscore: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL











Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design (IBD) Micro CMS 3.5 (aka 0.3.5) allow remote attackers to execute arbitrary SQL commands via (1) the administrators_username parameter (aka the Username field) or (2) the administrators_pass parameter (aka the Password field).

Reference:
http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0344.html
BID-29159
OSVDB-51298
EXPLOIT-DB-9699
http://wired-security.net/texts/advisories/IBD_Micro_CMS_3.5_SQL_Injection_Login_Bypass_Advisory.txt
http://www.securityfocus.com/bid/29159/exploit
ibdmicrocms-microcmsadmin-sql-injection(42539)
microcms-microcmsadmin-sql-injection(53272)

CWE    1
CWE-89

© 2013 SecPod Technologies