high7.5Public exploit code
CVE-2010-5029
SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter in a web action.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ecomat CMS - SQL Injection2010-06-29 · webapps · multiple
Impact
SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter in a web action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codefabrik | Ecomat Cms | Version 5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/1006-exploits/ecomatcms-sql.txt
- http://secunia.com/advisories/40013
- http://securityreason.com/securityalert/8518
- http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_ecomat_cms.html
- http://www.securityfocus.com/archive/1/511586/100/0/threaded
- http://www.securityfocus.com/bid/40491
- http://packetstormsecurity.org/1006-exploits/ecomatcms-sql.txt
- http://secunia.com/advisories/40013
- http://securityreason.com/securityalert/8518
- http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_ecomat_cms.html
- http://www.securityfocus.com/archive/1/511586/100/0/threaded
- http://www.securityfocus.com/bid/40491