CVE-2011-10001 iamdroppy phoenixcf articles.cfm sql injection
CriticalCVSS 9.8
EPSS 0.69%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability was found in iamdroppy phoenixcf. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file content/2-Community/articles.cfm. The manipulation leads to sql injection. The patch is named d156faf8bc36cd49c3b10d3697ef14167ad451d8. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218491.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phoenixcf project phoenixcf | < 2011-02-07 | 2011-02-07 |
| iamdroppy phoenixcf | All versions | No fix listed |
References
- github.com patch third-party-advisory
- vuldb.com permissions-required signature third-party-advisory
- vuldb.com technical-description third-party-advisory vdb-entry