3 matches found
CVE-2007-6656
The CVE-2007-6656 entry describes an SQL injection in CMS Made Simple's TinyMCE module, specifically in content_css.php, affecting CMS Made Simple 1.2.2 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the templateid parameter. The provided sources conf...
7.5CVSS8.4AI score0.01229EPSS
SaveExploits1References7Affected Software1
CVE-2007-6656: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in contentcss.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...
7.5CVSS6.4AI score0.01229EPSS
SaveExploits1References2
20