CVE-2017-17607

CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.
References
Link Resource
https://packetstormsecurity.com/files/145293/CMS-Auditor-Website-1.0-SQL-Injection.html Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/43272/ Exploit Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:cms_auditor_website_project:cms_auditor_website:1.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-12-13 09:29

Updated : 2024-02-28 16:04


NVD link : CVE-2017-17607

Mitre link : CVE-2017-17607

CVE.ORG link : CVE-2017-17607


JSON object : View

Products Affected

cms_auditor_website_project

  • cms_auditor_website
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')