Sql injection

2009-01-2718:30:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.8%

JSON

SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CPENameOperatorVersion
pardalcmsle0.2.0
pardalcmseq0.1.98
pardalcmseq0.1.1
pardalcmseq0.1.2
pardalcmseq0.1.99
pardalcmseq0.1.3
pardalcmseq0.1.97

Name	Operator	Version
pardalcms	le	0.2.0
pardalcms	eq	0.1.98
pardalcms	eq	0.1.1
pardalcms	eq	0.1.2
pardalcms	eq	0.1.99
pardalcms	eq	0.1.3
pardalcms	eq	0.1.97

References

www.securityfocus.com/bid/33404

exchange.xforce.ibmcloud.com/vulnerabilities/48175

www.exploit-db.com/exploits/7851