3 matches found
CVE-2015-5617
SQL injection vulnerability in pub/mpendingnews/deletependingnews.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter...
9.8CVSS10AI score0.0199EPSS
SaveExploits4References2
Sql injection
SQL injection vulnerability in pub/mpendingnews/deletependingnews.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter...
7.5CVSS9AI score0.0199EPSS
SaveExploits4References2
CVE-2015-5617: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in pub/mpendingnews/deletependingnews.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter...
9.8CVSS8.6AI score0.0199EPSS
SaveExploits4References2
20