7.5
CVSSv2

CVE-2017-15984

Published: 31/10/2017 Updated: 18/11/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Creative Management System (CMS) Lite 1.4 allows SQL Injection via the S parameter to index.php.

Vulnerable Product Search on Vulmon Subscribe to Product

bekirk creative management system lite 1.4

Exploits

# # # # # # Exploit Title: Creative Management System - CMS Lite 14 - SQL Injection # Dork: N/A # Date: 30102017 # Vendor Homepage: bekirkcouk/ # Software Link: codecanyonnet/item/creative-management-system-cms-lite/15297597 # Demo: demobekirkcouk/ # Version: 14 # Category: Webapps # Tested on: WiN7_x64/KaLiLinuX_x6 ...
Creative Management System CMS Lite version 14 suffers from a remote SQL injection vulnerability ...