CVE-2016-8903

CVE-2016-8903 affects dotCMS before 3.3.1. The issue is a SQL injection in the Site Browser > Templates pages screen, exploitable via the _EXT_13_orderby parameter. Remote authenticated attackers can execute arbitrary SQL commands. The public documents consistently describe the vulnerability a...

dotCMS 3.x SQL Injection

Title: Multiple SQL injection vulnerabilities in dotCMS 8x CVE Credit: Elar Lang / https://security.elarlang.eu Vendor/Product: dotCMS http://dotcms.com/ Vulnerability: SQL injection Vulnerable version: before 3.5; 3.3.1 and 3.3.2 depends on CVE CVE: CVE-2016-8902, CVE-2016-8903, CVE-2016-8904,...