high7.5Public exploit code
CVE-2013-4952
SQL injection vulnerability in functions/global.php in Elemata CMS RC 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Elemata CMS RC3.0 - 'global.php?id' SQL Injection2013-06-24 · webapps · php
Impact
SQL injection vulnerability in functions/global.php in Elemata CMS RC 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elemata | Elemata Cms | Version 3.0 |