CVE-2007-3313

2007-06-2118:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.009

Percentile

83.1%

JSON

Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the login_username parameter to login.php or (2) the item parameter to news.php.

References

osvdb.org/37068

osvdb.org/37069

secunia.com/advisories/25737

www.securityfocus.com/bid/24546

www.vupen.com/english/advisories/2007/2264

exchange.xforce.ibmcloud.com/vulnerabilities/34936

exchange.xforce.ibmcloud.com/vulnerabilities/34937

www.exploit-db.com/exploits/4081