5 matches found
CVE-2008-6026
SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6026
SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6026
Summary: CVE-2008-6026 affects BlueCUBE CMS with a SQL injection in tienda.php via the id parameter, enabling remote SQL command execution. Root cause: improper handling of the id input allows injection. Impact described in sources as partial confidentiality, integrity, and availability effects w...
CVE-2008-6026: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...
BlueCUBE CMS - 'tienda.php' SQL Injection
source: https://www.securityfocus.com/bid/31323/info BlueCUBE CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...