high7.5Public exploit code
CVE-2009-4794
Multiple SQL injection vulnerabilities in Community CMS 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter to view.p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Community CMS 0.5 - Multiple SQL Injections2009-03-31 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Community CMS 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter to view.php and the (2) a parameter in an event action to calendar.php, reachable through index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Community Cms | Community Cms | Version 0.5 |