high7.5
CVE-2005-4406
SQL injection vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.
Impact
SQL injection vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tmc Visionpool | Mercury Cms | through 4.0 |