CVE-2015-5617

SQL injection vulnerability in pub/mpendingnews/deletependingnews.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter...

Sql injection

SQL injection vulnerability in pub/mpendingnews/deletependingnews.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter...

PT-2020-7867

Name of the Vulnerable Software and Affected Versions: Enorth Webpublisher CMS affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter in the "pub/m pending news/delete pending news.jsp" endpoint. This enables...

CVE-2015-5617: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pub/mpendingnews/deletependingnews.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter...