critical9.8
CVE-2015-5617
SQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands …
Impact
SQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Enorth | Webpublisher Cms | All versions |