Sql injection

Multiple SQL injection vulnerabilities in SmartCMS v.2...

CVE-2014-9558

CVE-2014-9558 affects SmartCMS v.2 (Smartwebsites). Multiple SQL injection vulnerabilities arise from improper handling of user input before SQL query construction, allowing an attacker to abuse query logic and potentially access/modify database data. Public sources describe the vendor/product as...

SmartCMS 2 Cross Site Scripting

CVE-2014-9557 SmartCMS Multiple XSS Cross-Site Scripting Security Vulnerabilities Exploit Title: Smartwebsites SmartCMS v.2 Multiple XSS Security Vulnerabilities Product: SmartCMS v.2 Vendor: Smartwebsites Vulnerable Versions: v.2 Tested Version: v.2 Advisory Publication: Jan 22, 2015 Latest...

SmartCMS 2 SQL Injection

CVE-2014-9558 SmartCMS Multiple SQL Injection Security Vulnerabilities Exploit Title: Smartwebsites SmartCMS v.2 Multiple SQL Injection Security Vulnerabilities Product: SmartCMS v.2 Vendor: Smartwebsites Vulnerable Versions: v.2 Tested Version: v.2 Advisory Publication: Jan 22, 2015 Latest Updat...