high7.5Public exploit code
CVE-2012-6529
Multiple SQL injection vulnerabilities in Marinet CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) galleryphoto.php or …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Marinet CMS - 'gallery.php?id' SQL Injection2012-01-09 · webapps · php · Verified
- Marinet CMS - 'galleryphoto.php?id' SQL Injection2012-01-09 · webapps · php · Verified
- Marinet CMS - 'room2.php?roomid' SQL Injection2012-01-09 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Marinet CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) galleryphoto.php or (2) gallery.php; or the roomid parameter to (3) room.php or (4) room2.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Marinet | Marinet Cms | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/files/view/108474/marinetcmsroomid-sql.txt
- http://www.securityfocus.com/bid/51336
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72272
- http://packetstormsecurity.org/files/view/108474/marinetcmsroomid-sql.txt
- http://www.securityfocus.com/bid/51336
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72272