CVE-2014-1619 Multiple SQL injection vulnerabilities in Cubic CMS 5.1.1, 5.1.2, and 5.2 allow remote attackers to execute arbitrary SQL commands via the (1) resource_id or (2) version_id parameter to recursos/agent...
HighCVSS 7.5
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in Cubic CMS 5.1.1, 5.1.2, and 5.2 allow remote attackers to execute arbitrary SQL commands via the (1) resource_id or (2) version_id parameter to recursos/agent.php or (3) login or (4) pass parameter to login.usuario.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cubicfactory cubic cms | = 5.1.1 | No fix listed |
| cubicfactory cubic cms | = 5.1.2 | No fix listed |
| cubicfactory cubic cms | = 5.2 | No fix listed |
References
- 101719 vdb-entry
- 101721 vdb-entry
- packetstormsecurity.com exploit
- www.cubicfactory.com
- cubiccms-agent-login-sql-injection(90153) vdb-entry