SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and previous versions allows remote malicious users to execute arbitrary SQL commands via the article_id parameter.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
campware.org campsite 2.6.9 |
||
campware.org campsite 3.0.3 |
||
campware.org campsite 3.2.1 |
||
campware.org campsite 3.2.2 |
||
campware.org campsite 3.3.0 |
||
campware.org campsite 3.3.1 |
||
campware.org campsite 2.3.3 |
||
campware.org campsite 2.2.2 |
||
campware.org campsite 3.2.3 |
||
campware.org campsite 3.3.2 |
||
campware.org campsite 3.3.3 |
||
campware.org campsite 2.4.3 |
||
campware.org campsite 2.6.1 |
||
campware.org campsite 3.1.3 |
||
campware.org campsite 3.2.0 |
||
campware.org campsite 3.1.0 |
||
campware.org campsite 2.7.0 |
||
campware.org campsite 2.5.2 |
||
campware.org campsite 2.6.0 |
||
campware.org campsite 3.1.1 |
||
campware.org campsite 3.1.2 |
||
campware.org campsite 3.3.4 |
||
campware.org campsite |
Vulmon