8 matches found
EUVD-2006-3571
Malware in sbrugna...
CVE-2012-5342
Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 special.php, 2 article.php, or 3 cat2.php...
Sql injection
Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 special.php, 2 article.php, or 3 cat2.php...
SenseSites CommonSense CMS - article.php?id SQL Injection
SenseSites CommonSense CMS - article.php?id SQL Injection source: https://www.securityfocus.com/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...
SenseSites CommonSense CMS - 'special.php?id' SQL Injection
source: https://www.securityfocus.com/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...
SenseSites CommonSense CMS - special.php?id SQL Injection
SenseSites CommonSense CMS - special.php?id SQL Injection source: https://www.securityfocus.com/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...
CVE-2010-5037
SenseSites CommonSense CMS is affected by a SQL injection flaw in article.php via the article_id parameter. The underlying issue is unsanitized input allowing arbitrary SQL execution. This vulnerability is documented with CVSSv2 base score 7.5 (HIGH) and network attack vector with low complexity ...
CVE-2006-3576
The CVE-2006-3576 entry describes a SQL injection in SenseSites CommonSense CMS 5.0, exploitable via the Date parameter in search.php. Affected component: search.php within CommonSense CMS 5.0. Root cause: improper handling of user-supplied input (Date parameter) leading to arbitrary SQL executio...