CVE-2016-8903

🗓️ 14 Nov 2016 23:02:20Reported by mitreType

SQL injection vuln in "Site Browser > Templates pages" in dotCMS before 3.3.1 allows remote attackers to execute arbitrary SQL commands

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2016-8903	14 Nov 201623:00	–	cvelist
Prion	Sql injection	14 Nov 201623:20	–	prion
NVD	CVE-2016-8903	14 Nov 201623:20	–	nvd
OpenVAS	dotCMS < 3.3.1 Multiple SQLi Vulnerabilities - Active Check	2 Nov 201600:00	–	openvas
0day.today	dotCMS 3.x SQL Injection Vulnerability	2 Nov 201600:00	–	zdt
Packet Storm	dotCMS 3.x SQL Injection	1 Nov 201600:00	–	packetstorm

Nvd

Node

dotcms dotcmsRange≤3.3

Source	Link
github	www.github.com/dotCMS/core/pull/8460/
seclists	www.seclists.org/fulldisclosure/2016/Nov/0
securityfocus	www.securityfocus.com/bid/94311
security	www.security.elarlang.eu/multiple-sql-injection-vulnerabilities-in-dotcms-8x-cve-full-disclosure.html
github	www.github.com/dotCMS/core/pull/8468/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Nov 2016 23:20Current

9.2High risk

Vulners AI Score9.2

CVSS26.5

CVSS38.8

EPSS0.00347

CWE-89