Sql injection

2011-10-0810:55:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.1%

JSON

SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the BookmarkID parameter in an EditBookmark action.

CPENameOperatorVersion
coldbookmarkseq1.22

CPE	Name	Operator	Version
	coldbookmarks	eq	1.22

References

packetstormsecurity.org/1009-exploits/coldbookmarks-sql.txt

secunia.com/advisories/41334

securityreason.com/securityalert/8449

www.securityfocus.com/bid/43035

exchange.xforce.ibmcloud.com/vulnerabilities/61638

www.exploit-db.com/exploits/14933