TSiteBuilder SQL Injection Vulnerability

TSiteBuilder is a set of tools for building websites, mainly for creating HTML-based websites. A SQL injection vulnerability exists in TSiteBuilder version 1.0. A remote attacker can exploit the vulnerability by sending the 'id' parameter to the /site.php, /pagelist.php, or /pagenew.php files to...

CVE-2018-6365

SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /pagenew.php...

Sql injection

SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /pagenew.php...

CVE-2018-6365

SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /pagenew.php...

CVE-2018-6365

The CVE-2018-6365 issue affects TSiteBuilder 1.0, where an SQL injection vulnerability arises via the id parameter in /site.php, /pagelist.php, or /page_new.php. The root cause is improper handling of the id input allowing command injection into the database query, enabling an attacker to manipul...

CVE-2018-6365: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /pagenew.php...

TSiteBuilder 1.0 - SQL Injection

Exploit Title: TSiteBuilder 1.0 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://www.datacomponents.net/ Software Link: http://www.datacomponents.net/products/website/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan Sencan Author Web...