CVE-2016-8908

SQL injection vulnerability in the "Site Browser HTML pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...

CVE-2016-8908

SQL injection vulnerability in the "Site Browser HTML pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...

CVE-2016-8908

CVE-2016-8908 affects dotCMS HTML pages screen, exploitable via the orderby parameter to allow remote authenticated attackers to execute arbitrary SQL commands. Affected versions are before 3.3.1; the vulnerability can impact data confidentiality, integrity, and availability as implied by the SQ...