medium6.8
CVE-2009-3498
SQL injection vulnerability in php/update_article_hits.php in HBcms 1.7 allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
Impact
SQL injection vulnerability in php/update_article_hits.php in HBcms 1.7 allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hbcms | Hbcms | Version 1.7 |