CVE-2015-5617 SQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter.
CriticalCVSS 9.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| enorth webpublisher cms | All versions | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- seclists.org exploit mailing-list third-party-advisory