Code injection

2009-04-0810:30:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

86.8%

JSON

change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection.

CPENameOperatorVersion
ananta_cmseq1.0.0-b5

CPE	Name	Operator	Version
	ananta_cms	eq	1.0.0-b5

References

www.securityfocus.com/bid/29752

exchange.xforce.ibmcloud.com/vulnerabilities/43119

www.exploit-db.com/exploits/5824