medium6.8Public exploit code
CVE-2008-1462
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a v…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RunCMS Module section - 'artid' SQL Injection2008-03-20 · webapps · php · Verified
Impact
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Runcms | Runcms | All versions |