CVE-2012-5342 Information

Description

Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) special.php (2) article.php or (3) cat2.php.

Reference

http://packetstormsecurity.org/files/108426/CommonSense-CMS-Blind-SQL-Injection.html https://exchange.xforce.ibmcloud.com/vulnerabilities/72158

Share on: