PT-2013-5300 · Elemata · Elemata Cms
Cwh Underground
·
Published
2013-07-29
·
Updated
2013-07-30
·
CVE-2013-4952
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Elemata CMS version RC 3.0
Description
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the
id parameter in functions/global.php.Recommendations
For Elemata CMS version RC 3.0, avoid using the
id parameter in the affected functions until a fix is available. Consider restricting access to functions/global.php to minimize the risk of exploitation.Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Elemata Cms