SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /page_new.php.
References
Link | Resource |
---|---|
https://packetstormsecurity.com/files/146128/TSiteBuilder-1.0-SQL-Injection.html | Exploit Third Party Advisory VDB Entry |
https://www.exploit-db.com/exploits/43915/ | Exploit Third Party Advisory VDB Entry |
Configurations
History
No history.
Information
Published : 2018-01-29 05:29
Updated : 2024-02-28 16:25
NVD link : CVE-2018-6365
Mitre link : CVE-2018-6365
CVE.ORG link : CVE-2018-6365
JSON object : View
Products Affected
datacomponents
- tsitebuilder
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')