2 matches found
Sql injection
SQL injection vulnerability in index.php in the slownik module in SmodCMS 2.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ssid parameter...
CVE-2007-1931
CVE-2007-1931 affects SmodCMS 2.10 and earlier: SQL injection in index.php (slownik module) via the ssid parameter. This allows remote attackers to execute arbitrary SQL commands. CVSSv2 base score 7.5 (HIGH; AV:N/AC:L/Au:N/C:P/I:P/A:P). Exploitation appears in public references (e.g., exploit-db...