Published: 09/10/2012 Updated: 29/08/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 765

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote malicious users to execute arbitrary SQL commands via the id parameter to (1) special.php, (2) article.php, or (3) cat2.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
michau enterprises llc commonsense cms -

source: wwwsecurityfocuscom/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities ...

source: wwwsecurityfocuscom/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabiliti ...

source: wwwsecurityfocuscom/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities i ...

CWE-89 http://packetstormsecurity.org/files/108426/CommonSense-CMS-Blind-SQL-Injection.html https://exchange.xforce.ibmcloud.com/vulnerabilities/72158 https://nvd.nist.gov https://www.exploit-db.com/exploits/37941/

CVE-2012-5342

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect