CVE-2010-2436

SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO...

CVE-2010-2436

CVE-2010-2436 affects AneCMS Blog (likely v1.3 and earlier) via an SQL injection in modules/blog/index.php caused by improper handling of PATH_INFO. A remote attacker can craft a URL to execute arbitrary SQL commands on the database. Public references corroborate a path-based SQL injection in Ane...

CVE-2010-2436

creationtimestamp| type| source ---|---|--- 2010-06-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34141...