CMS Lite 1.4 SQL Injection

Exploit Title: Creative Management System - CMS Lite 1.4 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://bekirk.co.uk/ Software Link: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Demo: http://demo.bekirk.co.uk/ Version: 1.4 Category: Webapps Tested o...

CVE-2017-15984

Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...

CVE-2017-15984

CMS Lite 1.4 is affected by a SQL injection in index.php via the S parameter. The vulnerability arises from injectable SQL commands in the S query string, enabling an attacker to execute arbitrary SQL. Public PoCs and exploits exist (e.g., Exploit-DB, packetstorm) demonstrating the issue. The CVS...

CVE-2017-15984

Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...

CmsLite 1.4 - S SQL Injection

CmsLite 1.4 - S SQL Injection Exploit Title: Creative Management System - CMS Lite 1.4 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://bekirk.co.uk/ Software Link: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Demo: http://demo.bekirk.co.uk/ Version:...

CmsLite 1.4 - 'S' SQL Injection

Exploit Title: Creative Management System - CMS Lite 1.4 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://bekirk.co.uk/ Software Link: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Demo: http://demo.bekirk.co.uk/ Version: 1.4 Category: Webapps Tested o...