PT-2006-6474 · Xenis · Xenis.Creator Cms

David Vieira-Kurz

·

CVE-2006-5797

·

Publicado

2006-11-08

·

Atualizado

2017-07-20

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Xenis.creator CMS (affected versions not specified)
Description: The issue concerns multiple SQL injection vulnerabilities in the default.asp file of Xenis.creator CMS. Remote attackers can execute arbitrary SQL commands by manipulating the nav, s, or print parameters.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-5797

Produtos afetados

Xenis.Creator Cms