Sql injection

SQL injection vulnerability in InstantSoft InstantCMS 1.10.3 and earlier allows remote attackers to execute arbitrary SQL commands via the orderby parameter to catalog/id...

CVE-2013-6839

SQL injection vulnerability in InstantSoft InstantCMS 1.10.3 and earlier allows remote attackers to execute arbitrary SQL commands via the orderby parameter to catalog/id...

PT-2013-6146

Name of the Vulnerable Software and Affected Versions InstantSoft InstantCMS versions 1.10.3 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the orderby parameter to the "catalog/id" endpoint. Recommendations For...

CVE-2013-6839: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in InstantSoft InstantCMS 1.10.3 and earlier allows remote attackers to execute arbitrary SQL commands via the orderby parameter to catalog/id...