3 matches found
Sql injection
SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the site parameter...
CVE-2008-2792
SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the site parameter...
CVE-2008-2792
CVE-2008-2792 is a SQL injection vulnerability in eroCMS 1.4 and earlier, affecting index.php where an attacker can inject via the site parameter to execute arbitrary SQL commands. The connected records confirm the affected software (eroCMS prior to 1.4) and the vulnerable component (index.php), ...