RadioCMS 2.2 (menager.php, playlist_id param) - SQL Injection Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = 'SSV-79381' vul ID version = '1' author = 'hh' vulDate = '2013-05-26' createDate =...

CVE-2013-3531

The CVE-2013-3531 entry relates to a SQL injection in RadioCMS 2.2, affecting the file Meneger.php and exploitable via the playlist_id parameter. Affected: RadioCMS 2.2 (Meneger.php). Root cause: improper handling of user input leading to arbitrary SQL execution. Impact per NVD: partial confident...

PT-2013-4461

Name of the Vulnerable Software and Affected Versions RadioCMS version 2.2 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the playlist id parameter in the meneger.php file. Recommendations For RadioCMS version 2.2, consider restricting access to th...

CVE-2013-3531: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in meneger.php in RadioCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the playlistid parameter...