CVE-2008-0451 Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1) siteadmin/article-edit.php; and unspecified parame...
HighCVSS 7.5
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1) siteadmin/article-edit.php; and unspecified parameters to (2) submitted-edit.php, (3) page-edit.php, (4) section-edit.php, (5) staff-edit.php, and (6) staff-access.php in siteadmin/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pacercms | = 0.6 | No fix listed |
References
- pacercms.sourceforge.net patch
- 3574 third-party-advisory
- 20080122 PacerCMS Multiple Vulnerabilities (XSS/SQL) mailing-list
- 27397 patch vdb-entry
- pacercms-articleedit-sql-injection(39833) vdb-entry